Privacy ledger

Your data belongs to you.
Then it disappears.

This is not a standard privacy policy written by lawyers to protect a company. This is a public record of every data decision we have made — and a binding promise about every decision we will make.

Last updated: May 2026

What we collect

We collect only what is strictly necessary to provide the service. Nothing more.

Before your event

  • Your name and email address, to hold your place on our waitlist
  • Your wedding date and estimated guest count, to provision your portal
  • Payment details, processed and held exclusively by Stripe — we never see your card number

During your event

  • Guest names and email addresses or phone numbers, to issue invitation tokens
  • Photos and videos uploaded by your photographer or guests
  • Livestream recordings, if you enable replay
  • Chat messages within the closed group
  • Gift contribution details, processed by Stripe
  • Per-session access logs, for your audit trail only

What we do not collect

  • Facial recognition or biometric data of any kind
  • Advertising identifiers or tracking pixels
  • Social media profile data
  • Location data beyond the IP address used for token binding

What we never do

  • Sell, rent, or trade your data or your guests' data to any third party
  • Use your photos, videos, or messages to train any AI or machine-learning model
  • Retain any event data after the Burn Sequence completes
  • Use your data for advertising, even internally
  • Share data with governments except where legally compelled, in which case we will notify you unless prohibited from doing so

The Burn Sequence

Seven days after your event ends, Ki Shadi initiates the Burn Sequence. This is not a scheduled deletion job — it is a cryptographic destruction process:

  • All media files are overwritten with random data before deletion from Azure Blob Storage
  • All database records related to your event are purged and the storage pages zeroed
  • All encryption keys unique to your event are destroyed, making any residual data permanently unreadable
  • Your audit log is delivered to you by email, then deleted from our servers

The couple may accelerate the Burn Sequence at any time from the admin panel. The couple may also extend the window up to 30 days by request. After 30 days, no extension is possible under any circumstances.

We cannot recover data after the Burn Sequence completes. This is by design.

Your rights

Under GDPR and equivalent legislation, you have the right to access, correct, port, and erase your personal data. Given the ephemeral nature of our platform, most of these rights are exercised automatically by the Burn Sequence.

For data held during the event window, submit a request to privacy@ki-shadi.com. We will respond within 30 days. We do not charge a fee for reasonable requests.

Our Data Processing Agreement, which governs how we handle data on your behalf as a data controller, is available at /dpa.