Privacy Policy
Last updated: 24 September 2026
CardGPT ("we", "us") is a product of In Out Green ("the Company"). This policy explains what data CardGPT processes, why, and the choices you have. It applies to the CardGPT web application at cardgpt.in and to the CardGPT WhatsApp number.
1. Who our users are
CardGPT is a business tool for wedding card printing presses ("Printers"). Printers and their staff are our customers and account holders. Printers enter details about their own clients (the families ordering cards, "End Customers") into CardGPT to produce printed cards. For End Customer data, the Printer is the data controller and CardGPT processes it on the Printer's instructions.
2. Data we process
- Account data: staff name, mobile number (used for login by OTP and, optionally, for the WhatsApp workflow), role, business name and address, GST details for invoicing.
- Order data: the wedding details a Printer enters or forwards — names, honorifics, family members, event dates, times, venues, contact numbers, and the printer's own imprint text — and the generated card files (PDF, JPG).
- Templates and fonts: card artwork and font files a Printer uploads. Font files remain the Printer's licensed property.
- WhatsApp messages: messages that Printer staff send to the CardGPT number (including forwarded client messages, voice notes and images), the cards CardGPT sends back, and delivery statuses. CardGPT does not message End Customers.
- Usage and technical data: logs, IP address, browser type, and an audit trail of actions such as approvals and unlocks, used for security and support.
3. How we use it
- To provide the service: generate cards, apply requested changes, and send results to Printer staff.
- To read and interpret text a Printer enters or forwards, using automated language models (currently Google Gemini) so that plain-language change requests can be turned into structured edits. Only the text needed for the task is sent; it is not used by us to train models.
- To authenticate users, prevent abuse, invoice subscriptions and provide support.
- To improve the product using aggregated, non-identifying usage statistics.
4. Sharing
We share data only with service providers needed to run CardGPT: cloud hosting and file storage, the Meta WhatsApp Business Platform for messaging, Google (Gemini) for language processing, and payment providers for billing. Each is bound to process data only for the service. We do not sell personal data.
5. Retention
Order data and generated files are kept for the retention period the Printer configures (default 365 days after the last activity on an order) and are then deleted. WhatsApp media is deleted on the same schedule. Account data is kept while the account is active and for up to 90 days after closure, except records we must keep for tax and accounting. Audit logs are kept for 2 years.
6. Security
Data is encrypted in transit. Each Printer's data is isolated at the database level. File downloads use short-lived signed links. Access to production systems is restricted to authorised personnel.
7. Your rights
Printers can view and edit their data in the app. Printers, and End Customers via their Printer, may request access to, correction of, or deletion of personal data by writing to cardgpt.in@gmail.com. See also our data deletion instructions. We respond within 30 days.
8. Children
CardGPT is a business service and is not directed at children under 18.
9. Changes
We will post any changes to this policy on this page and update the date above. Material changes will be notified in the app.
10. Contact
In Out Green · Noida, Uttar Pradesh, India · cardgpt.in@gmail.com