Privacy Policy

Who we are

Invitely (joininvitely.com) is operated by Ivan Paskhin ("we," "us"). This policy explains what personal information we collect from event organizers and their guests, and how it's used.

What we collect

• Account info. If you create an account with email and password, we collect your email address via our authentication provider (Supabase) and send an automated confirmation email through Supabase's mail service. We never see or store your password in plain text. If you sign up with "Continue with Google" instead, Google shares your name, email, and profile photo with us.
• Event content you create. Titles, descriptions, dates, venue/address, background images, accent colors, and gift wishlist items you add to your invitations.
• Guest information. Names you add to a guest list, and — if a guest RSVPs — their response status and any optional note they leave. Guests don't need an account, email, or phone number to RSVP.
• Basic analytics. We use Umami, a privacy-focused analytics tool, to see page views and referrer info on invitation pages. Umami doesn't use cookies or track individuals across sites, but it does receive the visitor's IP address at the time of the request.

Invitely is currently free, and we don't collect any payment information. Gift wishlist links just point to external retailers you choose. If we ever start charging for the service, we'll update this policy first.

Cookies

The only cookies we set are strictly necessary session cookies (via Supabase) that keep organizers signed in to the dashboard. Public guest pages (the invitation links you share) don't set any cookies. We don't use advertising or cross-site tracking cookies.

Who we share it with

We use a small number of service providers to run Invitely: Supabase (database and authentication), Vercel (hosting), Umami (analytics), and — if you choose to sign in that way — Google (as an OAuth identity provider). We don't sell personal information, and we don't share it with advertisers.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information (for example, under California's CCPA/CPRA or similar state privacy laws). You can delete an event and its guest data at any time from your dashboard, or email us at info@joininvitely.com to request deletion of your account. We aim to respond to privacy requests within 30 days.

Children's privacy

Invitely is meant for adults organizing events — including kids' birthday parties — not for use by children themselves. We don't knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we'll remove it.

Data retention

We keep event and guest data for as long as your account or event exists. Deleting an event from your dashboard removes it and its guest list from our active database immediately. If you email us to delete your whole account, we'll remove your data from our active systems; it may briefly persist in routine backups for a limited period afterward, consistent with standard backup practices, before being fully purged.

Where data is processed

Invitely is operated from the United States, and our service providers process data in the U.S. By using Invitely, you understand your information may be transferred to and processed in the U.S.

Security

We take reasonable measures to protect your information, but no method of transmission or storage is completely secure.

Changes to this policy

We may update this policy from time to time. We'll update the effective date above when we do.

Contact

Questions about this policy or your data? Email info@joininvitely.com.