Privacy Policy

1. Information we collect

We collect information in the following ways:

• Account information you provide when you sign up, such as your name, email address, and password.
• Event content you create, such as event titles, dates, locations, messages, images, and host details.
• Guest information you add, such as guest names and their email addresses or phone numbers, so we can deliver invitations and record RSVPs.
• RSVP responses submitted by your guests, including their reply, party size, and any notes.
• Purchase records when you buy Plus: which event it was for, the amount paid, any promotion code used, and whether the payment was completed, refunded, or disputed. We never receive or store your card details.
• Usage and device data collected automatically, such as log data, browser type, and general interaction with the Service.

2. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Service, including sending invitations and tracking RSVPs.
• Authenticate you and keep your account secure.
• Send transactional messages such as invitation deliveries, reminders, and password resets.
• Improve and develop new features, and understand how the Service is used.
• Apply Plus to the event you bought it for, honor promotion codes (including limiting a code to one use per account), and handle refunds and disputes.
• Prevent fraud, abuse, and other harmful activity, and comply with legal obligations.

3. Payments

Plus is sold through Link, a service of Stripe, which acts as the seller (merchant of record). You pay on Stripe's own checkout page: your card details and billing address go directly to Stripe and never pass through InvitelyApp. To start a checkout we share your account email address with Stripe, along with which event is being upgraded, so the payment can be matched to it. Stripe then tells us whether the payment succeeded, was refunded, or was disputed.

Stripe's and Link's handling of your payment information is governed by their own privacy policies, which are linked at checkout.

4. Analytics

We use PostHog, a product analytics service, to understand how the Service is used, for example how many people view a page or create an account, and how many invitations are sent and answered. We use it without cookies or other storage on your device: PostHog counts visits using a temporary identifier it derives on its own servers from your IP address and browser details, rather than one saved on your device, and does not build a profile of you.

Before page information is sent, we remove anything that could identify an event or a guest: personal invitation links, event and guest identifiers, page titles, and web address parameters other than the campaign tags that say which link brought you here. Analytics events never contain names, email addresses, phone numbers, event details, or RSVP notes. Session recording is off.

5. How we share information

We do not sell your personal information. We share information only as needed to run the Service: with guests you choose to invite (they receive the event details you send), and with service providers who process data on our behalf — such as hosting, authentication, email or text message delivery, payment processing (see Payments above), and product analytics (see Analytics above).

No mobile information or email will be shared with third parties or affiliates for marketing or promotional purposes. This includes guest phone numbers, email addresses, and the messaging opt-in and consent records described in our Terms of Service. This information is used solely to deliver the invitations, reminders, and messages you request through the Service, and to honor opt-out requests. Message frequency varies by event; message and data rates may apply. Guests can reply STOP to a text or WhatsApp message at any time to opt out, or HELP for support.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

6. Guest information and your responsibilities

When you add guests, you are responsible for having the appropriate permission to share their contact details with us for the purpose of sending them an invitation. Guests can decline to respond, and hosts control whether a public guest list is shown on the RSVP page.

7. Data retention

We retain your account and event information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data, subject to any legal obligations that require us to retain certain information.

Purchase records are kept even after the event or account they belong to is deleted, for as long as we need them to handle refunds and disputes and to meet accounting and tax obligations.

8. Security

We use reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to or restrict certain processing. You can update most account information directly in the Service, or contact us to exercise these rights.

10. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after changes take effect means you accept the updated policy.

12. Contact us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@invitelyapp.com.