Privacy Policy
Last updated: 13 June 2026
This page is general information about our privacy practices, not legal advice.
This Privacy Policy explains how KD SHARK INDUSTRIES PVT LTD ("Zypaway", "we", "us")
handles personal information when you use Zypaway at zypaway.com.au (full edition) and
zypaway.com (global edition). We handle personal information in line with the
Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Information we collect
- Account data — your email address and basic profile (name, optional avatar). You can sign in with email/password or Google sign-in; we receive your email and name from Google, never your Google password.
- Invitation content — what you (the owner) add to an invitation: names, dates, venue, messages, music choice, typography, and any photos you upload.
- Guest-submitted data — when guests open a shared invitation they may submit RSVPs (name, attendance, party size, dietary notes, messages) and upload photos to the event album.
- Payment data — one-time plan purchases and add-ons are processed by Stripe. Stripe handles your card details; we never see or store full card numbers.
- Technical data — cookies and browser local storage used to keep you signed in and remember your active invitation, plus standard log/diagnostic data.
How we use your information
- To create, render and host your invitations and their RSVP and photo features.
- To operate accounts, process payments (via Stripe) and provide support.
- To keep the service secure, prevent abuse, and meet legal obligations.
Hosting & storage
Zypaway runs on Google Firebase (authentication, Firestore database, Cloud Storage and Hosting).
Your data is stored on Google's infrastructure and may be processed on servers outside Australia. We rely on
Firebase's security controls and our access rules to protect it.
Share links are public by design
An invitation share link (for example zypaway.com/i/<code>) is accessible to anyone who has the link.
Anyone with the link can view the invitation and may submit an RSVP or upload a photo to the album. Only share it with people you intend to invite.
Your controls & choices
- You can edit or delete your invitations, and remove individual photos (yours or guests'), at any time from the editor.
- You can request access to, correction of, or deletion of your personal data by emailing us (see below).
- You can clear cookies/local storage in your browser, though this will sign you out.
Data retention & deletion
We keep invitation and account data while your account is active or as needed to provide the service.
To request deletion of your account or specific data, email business@zypaway.com.au
and we will action it within a reasonable time, subject to any legal record-keeping obligations.
Children
Zypaway is intended for adults organising events. It is not directed at children.
Changes
We may update this policy from time to time; the "Last updated" date above will change accordingly.
Contact us
KD SHARK INDUSTRIES PVT LTD — business@zypaway.com.au.
See our contact page for more.