Legal
Privacy Policy
Last updated: 14 October 2026 · Effective: 14 October 2026
- We collect only what is needed to make and host your programme, take payment and keep the guestbook working.
- We do not sell personal data, show adverts, or use tracking or analytics cookies.
- Programmes are seen by people who have the link or QR code. We ask search engines not to list them.
- Photos, music and wishes are deleted 30 days after a programme’s time online ends.
- You can ask us to access, correct or delete your data at any time.
1. Who we are
NrityaBook is a product of NEOWISE PTE. LTD. ("NEOWISE", "we", "us"), a company registered in Singapore. This policy explains how we collect, use, disclose and protect personal data when you use NrityaBook, including the website, the editor, published programmes, the guestbook and the keepsake PDF. It should be read together with our Terms of Service.
We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA).
2. Who this policy covers
- Customers: the person who creates, pays for and manages a programme (for example a parent, dancer or teacher).
- People named or shown in a programme: dancers, gurus, musicians and others whose names or photos the customer adds.
- Guests: people who open a programme and may leave a wish in the guestbook.
3. What we collect
From customers
- Programme content: the title, names of dancers and the guru, venue, date and time, item names and descriptions, thank-you messages, extra pages, photos and any music you upload.
- Contact details: your email address, given at checkout, used to send your private links, receipts and reminders.
- Payment details: handled entirely by our payment provider, Stripe. We receive the payment status, amount and your email. We never see or store your card or bank details.
- Your private links: we store only a scrambled (hashed or encrypted) form of your editing and admin keys, so they cannot be read back from our database.
From guests
- The name and message you type into the guestbook, and the time it was posted.
Collected automatically
- Internet (IP) address: used briefly to stop spam and abuse, for example to limit how many wishes or new programmes can come from one address. These counters expire on their own, most within minutes and the longest after 60 days.
- Basic technical logs kept by our hosting provider for security and to fix problems.
We do not use advertising, analytics or tracking cookies.
4. How we use it
- To build, save, preview and publish your programme, and keep it online for the time you paid for.
- To run the guestbook and create the keepsake PDF and offline copy.
- To take payment, issue receipts and automatically refund payments we cannot fulfil.
- To email you your private links and reminders before your time online ends.
- To keep the service secure and prevent spam, fraud and abuse.
- To meet our legal, tax and accounting obligations.
We do not use your programme content or guests’ wishes to train AI models, and we do not send marketing emails unless you have agreed to receive them.
5. Who can see your programme
- Published programmes can be opened by anyone who has the link or scans the QR code. We do not list programmes publicly, and we tell search engines not to index programmes or their photos. Please share the link only with people you want to see it.
- Guestbook wishes are shown on the programme to anyone who opens it, while it is online. The customer can remove any wish.
- Drafts and previews are private to whoever holds the editing link.
6. Photos, names and children
Programmes often feature young dancers. NrityaBook is meant to be used by adults: a parent, guardian, teacher or adult performer. If you add someone else’s name or photo, especially a child’s, you must have their permission, or their parent’s or guardian’s. We do not knowingly collect personal data directly from children under 13. If you believe a child’s details were added without permission, contact us and we will remove them promptly.
7. Service providers we use
We share data only with the providers that run NrityaBook for us, and only for that purpose:
| Provider | What they do |
|---|---|
| Cloudflare | Hosting, file storage for photos and music, and secure delivery of the website |
| Upstash | Our database (programme details, wishes, payment records), hosted in Singapore |
| Stripe | Payment processing (card, Apple Pay, Google Pay, PayNow) |
| Resend | Sending emails such as your private links and reminders |
| Google Fonts | Lettering used on the website and programmes; your browser fetches font files from Google |
| Google MediaPipe (via jsDelivr) | The “use my own dance photo” QR design downloads a person-detection model to your browser. Your photo is processed on your own device and is never sent to us or to Google |
We may also disclose personal data if required by law, to protect the rights and safety of our users or the public, or as part of a sale or reorganisation of our business, in which case this policy continues to apply.
8. Data stored outside Singapore
Some of our providers store or process data in other countries (for example, Cloudflare delivers the site from servers around the world). Where we transfer personal data out of Singapore, we use providers that protect it to a standard comparable to the PDPA.
9. How long we keep it
| What | How long |
|---|---|
| Unpaid drafts and their photos | Deleted 45 days after the last edit |
| Published programmes | Online for the year you paid for, plus any extra years you add |
| Photos, music and wishes | Deleted 30 days after the programme’s time online ends |
| Programme text (names, venue, items) | Removed 30 days after the programme’s time online ends |
| Payment record, email and link name | Kept as part of our business and tax records, as the law requires. The link name stays reserved so no one else can reuse it. |
| Anti-spam counters (IP address) | Expire on their own, at most after 60 days |
Copies you download yourself, such as the keepsake PDF or the offline copy, stay with you and are not affected.
10. Your browser
The editor uses your browser’s local storage to remember which programme you were working on and where you left off. Programmes may remember whether you turned the music on or off. This stays on your device; you can clear it in your browser settings at any time.
11. Keeping data safe
We use encrypted connections (HTTPS), store private keys only in scrambled form, limit who can access our systems, and check every upload is a real photo or audio file. No system is perfectly secure, so please keep your editing and admin links private: anyone who has them can change or moderate your programme.
12. Your rights
You may ask us to:
- tell you what personal data we hold about you and how it has been used;
- correct personal data that is wrong;
- delete your programme or a wish you posted, or take down your name or photo from someone else’s programme;
- withdraw consent you have given us (this may mean we can no longer provide the service).
Customers can edit their programme and remove wishes themselves using their private links. For anything else, email us. We will respond within 30 days.
13. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and change the “Last updated” date. If the changes are significant, we will let customers with live programmes know by email.
14. Contact us
For questions, requests or complaints about privacy, contact our Data Protection Officer:
NEOWISE PTE. LTD., Data Protection Officer
60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051
Email: neowise.helpdesk@gmail.com
WhatsApp: +65 8363 6240
If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore.
15. Governing law
This policy is governed by the laws of Singapore.