Privacy Policy

Your love is personal. So is your data. This policy explains what we collect, why we collect it, and how we keep it safe.

1. Who we are

Unfoldlove is a service operated by AV Global Tech (a sole proprietorship based at 217, Chand Nagar, New Delhi — 110018, India). For privacy-related matters, contact: contact@avglobaltech.com.

This policy is designed to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. What we collect

Only what we need to make the service work:

3. How we use it

• ✦To create and deliver your personalised gift cards.
• ✦To process your payments and add credits to your account.
• ✦To send you confirmation emails after successful purchase.
• ✦To respond to your support requests or refund enquiries.
• ✦To detect and prevent fraud, spam or misuse of the platform.
• ✦To improve our service (aggregated analytics only, never identifying individual users).

We do not use your data for advertising. We do not sell your data to anyone. We do not profile you or share your gift card content with any third party.

4. Who we share it with

We only share your data with the service providers we need to run Unfoldlove. Each of these has their own privacy policy and is bound by contract to protect your data:

We may also disclose data if legally required by Indian authorities (subpoena, court order, valid law enforcement request). We will notify you first, unless prohibited by law.

5. Cookies & tracking

Unfoldlove uses cookies for two specific purposes:

• • Authentication: to keep you logged in across sessions.
• • Affiliate tracking (unfold_ref): a 30-day cookie that credits affiliate partners if you were referred through their link.

We do not use tracking pixels, third-party ad networks, retargeting or cross-site tracking cookies.

6. Data retention

Your account, cards and content stay with us as long as you have an active account or usable credits. Because these gift cards are meant to live forever at their unique URL, we don't automatically delete anything.

If you want your account, cards and all associated data deleted, email us and we'll process it within 15 working days. Payment records are retained for 7 years as required by Indian tax law, but stripped of personal identifiers where possible.

7. Your rights under the DPDP Act

As a Data Principal under Indian law, you have these rights:

• • Right to access: request a copy of all data we hold about you.
• • Right to correction: update or fix any data that's wrong.
• • Right to erasure: ask us to delete your data.
• • Right to grievance redressal: raise concerns with our grievance officer.
• • Right to nominate: nominate someone to exercise your rights if you can't.

Exercise any of these by writing to contact@avglobaltech.com. We'll respond within 30 days.

8. Data security

We take reasonable technical measures to protect your data:

• • HTTPS/TLS encryption for all data in transit.
• • Encrypted database storage on Supabase.
• • Row-level security policies to isolate data between users.
• • Regular security updates to all platform dependencies.
• • Vercel-encrypted environment secrets for API keys.

In the unlikely event of a data breach affecting you, we will notify you and the Indian Data Protection Board within 72 hours as required by law.

9. Children

Unfoldlove is not intended for anyone under 18 years old. We do not knowingly collect data from children. If you believe we've accidentally collected data from a minor, email us and we'll delete it immediately.

10. International users

Unfoldlove is designed for and operated from India. If you access from outside India, your data may be processed in Indian jurisdictions. By using the service, you consent to this transfer.

11. Changes to this policy

We may update this policy occasionally. Significant changes will be communicated by email or a notice on the website. The "Last updated" date at the top reflects the most recent revision.

12. Grievance officer