This Privacy Policy explains how Inviteable (“we,” “us,” or “our”) collects, uses, and protects your information when you use Inviteable (the “Service”).

1. Information We Collect

We collect:

Account information: email address and password hash (we never store your password in plaintext).
Event information you provide: event name, date, venue, message, theme choice, custom uploaded images, gift registry link.
Guest information you provide: name, email address, and phone number of guests you invite.
RSVP responses: accept/decline status, guest count, optional notes left by your guests.
Payment information: processed directly by our payment processor (e.g. Stripe). We do not store your full card number or CVV.
Technical data: IP address, browser type, device type, and basic usage analytics necessary to operate and secure the Service.

2. How We Use Your Information

We use your information to:

Provide the Service: create and deliver invitations, collect RSVPs, notify hosts.
Send transactional emails (invitations, reminders, thank-yous, RSVP notifications).
Process payments and prevent fraud.
Respond to support requests.
Detect and prevent abuse, illegal activity, and violations of our Terms.
Improve and secure the Service.

We do not sell your data or your guests' data. We do not use guest contact information for our own marketing.

3. Service Providers

We use trusted third-party providers to operate the Service. These providers only access the data necessary to perform their service and are contractually bound to protect it.

Supabase — database hosting, authentication, file storage.
Resend — transactional email delivery.
Stripe — payment processing.
Vercel — application hosting.

4. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising cookies or third-party tracking cookies.

5. Data Retention

We retain your account and event data for as long as your account is active. You can delete an invitation at any time, which permanently removes the invitation and all associated guest records. You can request account deletion by emailing support@inviteable.app; we will delete your data within 30 days, except where we are required to retain it for legal, accounting, or fraud-prevention purposes.

6. Your Rights

Depending on your location (including under GDPR and CCPA), you may have the right to: access, correct, or delete your personal data; restrict or object to processing; request data portability; and withdraw consent at any time. To exercise these rights, contact support@inviteable.app. We will respond within 30 days.

7. Guest Data

When you upload guest contact information, you confirm that you have permission to invite those guests and to share their information with us for the limited purpose of delivering their invitation and tracking RSVPs. Guests can request their data be deleted by contacting support@inviteable.app.

8. Security

We use industry-standard safeguards including TLS encryption, access controls, and row-level security. No system is perfectly secure, however, and we cannot guarantee absolute security of your data.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with information, contact support@inviteable.app and we will delete it.

10. International Users

Your information may be processed and stored in countries other than your own. By using the Service, you consent to this transfer, subject to applicable law.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.

12. Contact

Questions about this Privacy Policy or your data? Contact us at support@inviteable.app.