Privacy Policy

Last updated: September 25, 2026

Invitarei helps hosts create digital invitations and manage their guests. This policy explains in plain language what personal data we handle, why, and the choices you have. It applies both to hosts who create events and to the guests who receive their invitations.

Who we are

Invitarei (invitarei.com) is responsible for the data of the people who create an account. For any privacy question or request, write to hello@invitarei.com.

What we collect

Hosts: your name, email address and profile picture when you sign in with email, Google or Apple; the events you create and their content (texts, photos, music, places and dates); your language and theme preferences.
Payments: Stripe processes your card and other payment details. We only receive the result and the amount, never your card number.
Guests: what the host enters about you (name, email, phone number, Instagram username, number of seats) and what you send through the invitation: your RSVP, companions, dietary notes, messages, guestbook entries, photos and voice messages.
Everyone: the technical data needed to run and protect the service, such as your IP address, browser and device, and, only if you accept analytics cookies, how you use the site.

Why we use it

To provide the service: show invitations, collect RSVPs, send invitations and reminders by email or WhatsApp on the host’s behalf, and let hosts manage their guest list (performance of a contract).
To process payments and keep the records the law requires (legal obligation).
To prevent spam, abuse and fraud, and to fix errors (legitimate interest).
To understand how the product is used and improve it, only with your consent.

We do not sell personal data, and we never use guests’ data for advertising.

If you are a guest

The host who invited you decides who is on the list and what the invitation asks. For guest data the host is responsible, and Invitarei processes it on their behalf, only to run their event. Your answers are visible to the host and to the co-hosts they add. You can ask the host, or us, to correct or delete your data.

Who we share it with

We work with providers that process data for us, under contract, only to run Invitarei:

Vercel: hosting, storage of uploaded files and anonymous visit statistics
Neon: database
Stripe: payments
Resend: email
Meta (WhatsApp) and Kapso: WhatsApp messages
Google and Apple: sign-in, and wallet passes when a guest adds one
Umami: anonymous visit statistics, without cookies
PostHog, Google Analytics and Meta Pixel: analytics, only with your consent
Sentry: error reports
Upstash: spam protection
OpenFreeMap: maps

Some of these providers are located outside your country, including in the United States. When data leaves the European Economic Area we rely on recognized safeguards such as the European Commission’s Standard Contractual Clauses. We also share data when the law requires it.

Cookies

We use essential cookies and your browser’s storage to keep you signed in, remember your language, show prices in your country’s currency and save your invitation draft. Analytics cookies are only set if you accept them. You can change your choice at any time with the button below.

How long we keep it

We keep your account and events while your account is active. When a host deletes an event, its guest list, RSVPs, messages, photos and voice messages are deleted with it. You can ask us to delete your account at any time. We keep payment records for as long as tax law requires, and copies in backups disappear on their normal cycle.

Your rights

Depending on where you live, you can ask to access, correct or delete your data, to receive a copy of it, to object to or limit how we use it, and to withdraw your consent. Write to hello@invitarei.com and we will answer within 30 days. You can also complain to the data protection authority in your country.

Security

Every connection is encrypted (HTTPS). Only the host and the co-hosts they invite can see an event’s guest list, each guest opens the invitation with their own private code, and sensitive actions are protected against abuse.

Children

You must be at least 16 to create an account. Guests of any age can receive an invitation; hosts who add a minor’s contact details need permission from a parent or guardian.

Changes to this policy

If we change this policy we will update the date at the top. If the change is important, we will also tell hosts by email.