Festive Studio Privacy Policy
Updated 19 September 2026
Scope and contact
This notice covers Festive Studio accounts and greeting creation provided by Hridaan Labs, including hridaan-festive-studio.onrender.com. For privacy questions and requests, email [email protected]. The separate website privacy notice covers optional analytics on our marketing pages.
Information collected
Registration collects your name, email address and phone number with country code. We store verification status, account activity, sign-in records, free-creation usage, optional marketing choices and their timestamps, early-access requests, and campaign source labels when supplied. Greeting records include your chosen occasion, date, sender or company name, text, optional uploaded logo, artwork, finished images, settings and API cost information. Do not supply confidential material or another person’s information without permission.
How we use information
We use account information to verify and sign you in, restore saved greetings, enforce the free allowance and respond to support requests. Greeting details enable generation and editing. Technical requests and hashed rate-limit identifiers help prevent abuse. Operational event records contain milestone names and times without names, emails or greeting contents.
AI and other providers
Render hosts the application and stored data in the configured Singapore region. OpenAI processes prompts and greeting details needed to generate requested text and artwork, which can include names or text you enter. Uploaded logo files are composited by our application and are not sent to the image model in the current implementation. ZeptoMail by Zoho processes your email address and sign-in message for delivery. A currency-rate service provides exchange rates for cost display. Providers may process technical data in other countries under their own terms and retention practices. OpenAI states that API data is not used for model training by default; this is not a promise of zero retention. Provider notices are available at openai.com/enterprise-privacy, render.com/privacy and zoho.com/privacy.html.
Cookies and communication choices
An essential secure cookie supports account sessions, which expire after 30 days. Signing out revokes the session. Verification links expire after 20 minutes and can be used once. Verification messages are necessary service emails. Product-update consent starts unchecked and can be changed in your signed-in account or by contacting us. Early-access requests record your interest in availability updates. Providing a phone number does not subscribe you to WhatsApp marketing. Optional marketing-site analytics are described in the separate website notice.
Retention
Accounts, saved greetings, usage records and consent choices remain stored so you can return to the service. The current app has no automatic deletion schedule for these records after inactivity. Expired verification and session records are cleaned up by the application, and short-lived rate-limit records are periodically removed. Provider logs and backups may have separate retention schedules. Keep downloaded copies of greetings you want to retain.
Your requests
Email [email protected] from your registered address to request access, a copy, correction, account closure or deletion of your information, or help withdrawing optional marketing consent. We may verify account ownership. The current release has no self-service account deletion button. We will explain any retention required for legal or security reasons and limitations affecting provider logs or backups.
Security and changes
We use HTTPS, account-scoped access and server-side credentials. Verification tokens and account-session tokens are stored as hashes. Keep sign-in links private; no online service can guarantee absolute security. Report suspected misuse to our contact email. Changes to this notice will appear here with an updated date.