Privacy Policy

Who is responsible

CHERMO is operated by its founder, Vansh. For privacy questions, support, or requests about your information, email chermo18.in@gmail.com.

Information used

• Account details: name and email address, plus the password you submit when using email and password sign-up or login. Google sign-in may provide account details when that option is enabled.
• Optional profile details: phone number, date of birth, relationship status, and About Me text, if you choose to save them in your profile. These details are sent to the account API; they do not stay only on your device.
• Memory details: recipient name, memory title, optional date, personal message, and the photos or videos you choose to upload (up to the limits shown in the form).
• Order and payment references: selected template and order details, payment status, and transaction identifiers used to verify an order. Payment details are entered through Razorpay Checkout; CHERMO’s frontend sends the returned payment references to its API for verification.
• Browser and session information: the site stores a timestamp in local browser storage to control the introductory animation and sends browser credentials with API requests for account/session functionality. The frontend does not set or read cookie values directly; session cookie behavior is controlled by the API.

Optional Google Analytics, when configured and allowed by you, measures public page visits and template interactions. Tracking excludes account and memory pages, form content, query strings and referring URLs. You can change your choice through Analytics preferences on public pages. A phone number is optional in your profile; the customer forms do not request a postal address. Third-party checkout, sign-in, and linked experiences have their own data practices.

Why information is used

Information is used to create and manage accounts, prepare the memory you request, associate uploads with an order, collect and verify payment, publish a memory when requested, send order or publication emails, maintain the service, and respond to support or privacy requests.

When information is shared

• Render: hosts the API that receives account, order, memory, and upload requests.
• Vercel: delivers the frontend website.
• Razorpay: provides the checkout integration and processes payment details you enter in its checkout.
• Google: provides Google sign-in when it is enabled. The site also requests Google Fonts from Google’s font service.
• External image services: the homepage currently loads sample images from Picsum, and template preview image URLs are supplied by the API. Those image hosts receive the ordinary browser request needed to display an image; template image sources and licenses require owner confirmation.
• Email delivery: service emails may be sent through a provider configured on the service backend. The provider is not identifiable from the frontend.

When a memory is published, its page can be opened by people who have its link. A published destination may be hosted on another domain. Its hosting and privacy practices may differ; a link is not a password or a guarantee against copying or sharing. Do not include content you do not want to appear on a published memory page.

Retention and security

Account, order, memory, and upload information may be retained for as long as reasonably necessary to provide and operate the service, meet applicable recordkeeping obligations, handle disputes, and protect the service. A specific deletion schedule has not been confirmed, and this policy does not promise automatic deletion.

The frontend uses HTTPS endpoints for the website and API and relies on the account and payment controls implemented by the connected services. No online transmission or storage method can be represented as risk-free.

Your choices and requests

You can choose what memory details and media to submit, and whether to use Google sign-in when it is offered. You can edit the supported profile fields from your account. To ask about access, correction, deletion, withdrawal of permission, or another privacy request, email chermo18.in@gmail.com. CHERMO may need to verify a request before acting on it. Removing information needed to fulfil an order may affect that service; records required by law may need to be retained.

Before submitting another person's details or images, obtain the permissions needed for their use and publication. Take particular care with content involving children; do not submit sensitive information or identification documents in messages or uploads. Contact support if content was shared without permission.

Changes to this policy

We may update this policy when the service or its data practices change. The current version and its update date will be posted on this page.