This Privacy Policy explains how Oryvionic Microsystems Tech Solutions LLP ("Lumivyt", "we", "us") collects, uses, shares and protects personal data when you use lumivyt.com and its pages (the "Service"). We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and rules made under it.
1. Data we collect
- Details you type: names, messages, event details, venue and contact numbers you add to a page.
- Photos and audio you upload: used only to create your page.
- Account and order details: name, phone number, email address, order history and invoices, when you buy a paid product.
- Payment details: handled entirely by Razorpay. We receive only a payment ID and status. We never see or store your card number, UPI PIN or bank credentials.
- RSVP details: guest name, phone number and attendance, entered by guests on invitation pages, shared only with the host.
- Technical data: IP address, device and browser type and page views, used for security, abuse prevention and aggregate statistics.
Free greetings that contain only text are stored inside the share link itself. We do not keep a copy on our servers.
2. Why we use it
- To create, display and share the pages you make.
- To process payments, issue invoices and handle refunds.
- To send service messages, such as order confirmations and subscription renewal reminders.
- To prevent fraud, abuse and misuse of the Service, and to meet legal obligations.
We process your data on the basis of your consent, which you give when you upload photos or place an order, and for legitimate uses permitted by the DPDP Act. We do not sell your personal data or use it for third-party advertising.
3. Photos and AI processing
- Face detection and background removal run on your own device wherever possible.
- For paid AI effects, the photo is sent to our AI processing provider only to create the result, and is not used to train AI models.
- You must upload only photos of yourself or of people who have given you permission.
- AI-generated images are labelled as AI-generated.
4. How long we keep data
- Personal page photos: deleted automatically 45 days after upload.
- Voice messages and business logos on greetings: deleted automatically 45 days after upload.
- Event and business page assets: kept while the plan is active, then deleted within 30 days.
- Order and invoice records: kept for the period required by tax and accounting laws (currently up to 8 years).
- Security logs: kept for up to 180 days.
5. Who we share data with
We share data only with service providers who help us run the Service, under contracts that require them to protect it:
- Cloudflare, Inc.: hosting, storage and security
- Razorpay Software Pvt. Ltd.: payment processing
- Our AI processing provider: paid photo effects only
We may also disclose data when required by law or by a lawful order of a government authority or court.
6. Your rights
Under the DPDP Act you can ask us to give you a summary of your personal data, correct or update it, erase it, or withdraw your consent. You can delete your photos from your dashboard at any time, or email info@omts.co.in. You may also nominate another person to exercise these rights on your behalf.
7. Cookies
We use only essential cookies needed to keep you signed in and to secure the Service. We do not use advertising cookies.
Private links: when you make a greeting or class train private, we give you a 4-digit PIN. When the right PIN is typed, we set one essential cookie for that link only, so the same phone does not need the PIN again. It holds no personal data and expires after 45 days. Repeated wrong PINs lock the link for a while to stop guessing.
8. Children
The Service is meant for users aged 18 and above. Users under 18 may use it only with the consent and supervision of a parent or guardian.
Class Express (school class pages)
Class Express lets a teacher or school staff member put a class of children on one animated page. Because this is children's personal data, these rules apply:
- Consent: the teacher must confirm that the parents (or the school, with the parents' agreement) allow the photos to be used. Without this, a class cannot be created.
- Minimum data: first names, boy or girl, and a face photo only. We do not ask for surnames, ages, dates of birth, phone numbers or addresses of children.
- Photos stay small: photos are cropped to the face on the teacher's device; the full photo (including a group photo) is never uploaded, and location data in photos is removed.
- Private link: the class page has a random link, is hidden from search engines, and works only after payment. Photos cannot be embedded on other websites.
- Deletion: all class photos and names are deleted automatically after 45 days. The teacher can delete the whole class at any time with the private edit link.
- Teacher's email: the teacher gives an email address that is shown on the class page, only so parents can contact them. It is deleted with the class.
- Removing one child: a parent can ask the teacher (with the "Remove my child" button on the class page) to remove their child. The teacher removes the child with the private edit link, and the photo and name are deleted at once.
- No profiling or advertising: children's data is never used for advertising, tracking or training AI models, and is never sold or shared.
9. Security
We use encryption in transit (HTTPS), access controls, automated abuse screening and regular security reviews. No system is perfectly secure. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as required by law.
10. Grievances
For any privacy question or complaint, contact our Grievance Officer at info@omts.co.in, VP Thampy Road, Kudapanakunnu, Thiruvananthapuram, Kerala 695043. If you are not satisfied with our response, you may approach the Data Protection Board of India.
11. Changes
We may update this policy. We will post the new version on this page with a new "Last updated" date, and notify paying users of material changes by email.