Welcome to Invitofy ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website or use our services.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our site. For questions, contact us at privacy@invitofy.com.
1. Information We Collect
Information you provide directly
- Account information: name, email address, and password when you register.
- Event data: event name, date, venue, and details you enter when creating an event.
- Guest data: names, email addresses, and phone numbers of guests you add.
- Communications: messages or enquiries you send us.
Information collected automatically
- Usage data: pages visited, actions taken, time spent, referring URLs.
- Device data: browser type, operating system, IP address, language preference.
- Cookies and local storage: session identifiers, consent preferences, and (with your consent) analytics data. See our Cookie Policy for full details.
2. How We Use Your Information
We use the data we collect to:
- Create and manage your account and events.
- Send invitation emails and WhatsApp messages on your behalf.
- Track RSVP responses and provide you with attendance reports.
- Respond to your support requests.
- Improve and personalise the service (with analytics consent).
- Detect and prevent fraud and abuse.
- Comply with legal obligations.
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process personal data on the following grounds:
- Contract performance: to provide the services you signed up for.
- Legitimate interests: to keep our platform secure and improve our service.
- Consent: for analytics, marketing cookies, and promotional emails, which you can withdraw at any time.
- Legal obligation: to comply with applicable law.
4. Sharing Your Information
We do not sell your personal data. We may share it with:
- Email/SMS providers (e.g., SMTP relay services) solely to deliver your invitations.
- Analytics providers (e.g., Google Analytics), only if you have consented to analytics cookies.
- Hosting and infrastructure providers who process data on our behalf under data processing agreements.
- Law enforcement when required by law or to protect rights and safety.
5. Data Retention
We retain your account data for as long as your account is active or as needed to provide services. Event and guest data is retained until you delete it or close your account. Analytics data (where consented) is retained per the third-party provider's policy (Google Analytics: 14 months by default). Inactive accounts may be deleted after 24 months of inactivity following prior notice.
6. Cookies
We use strictly necessary cookies to operate the site (session management, CSRF protection). With your consent, we also set analytics and marketing cookies. You can manage your preferences at any time via the cookie banner or our Cookie Policy page.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data ("right to be forgotten").
- Restrict or object to certain processing.
- Data portability: receive your data in a machine-readable format.
- Withdraw consent at any time without affecting prior processing.
To exercise any of these rights, email us at privacy@invitofy.com. We will respond within 30 days. If you are in the EEA you may also lodge a complaint with your local data protection authority.
8. Security
We implement industry-standard security measures including HTTPS/TLS encryption, bcrypt password hashing, CSRF tokens on all forms, and restricted access to production systems. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
9. Third-Party Links
Our site may link to third-party websites. We have no control over their privacy practices and encourage you to review their policies before providing personal information.
10. Children's Privacy
Invitofy is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of Invitofy after changes constitutes acceptance of the revised policy. For material changes, we will notify you by email or prominent notice on the site.
12. Contact Us
Questions or concerns about this Privacy Policy? Reach out:
Invitofy
Email: privacy@invitofy.com