Privacy Policy
Last updated: October 29, 2026
This policy explains what Invitify ("we", "us") stores when you make an invitation at invitifycard.com, what we store about the guests who open it, and what we do with it. It is written to be read, so it is short.
What we store about you
- Account — your name and email address. Passwords are kept only as a one-way hash, never in plain text. If you sign in with Google, we receive your name, email and profile picture from Google.
- Your invitations — the names, message, design choices, event details and settings of every invitation you save, plus the photos and music you upload for an invitation website.
- Opens — for each saved invitation we count how many times it has been opened and when it was last opened. We do not record who opened it.
- Billing — payments are handled by Paddle.com, our Merchant of Record, under Paddle's privacy policy. Paddle sends us the amount, currency, a transaction reference and what was bought. We never see your card details.
- Email you give us for notifications — if you ask to be told when a card is opened, we store that email for that purpose. If you also tick the optional box, we may send occasional product updates; every such email has an unsubscribe link.
What we store about guests
A guest who opens an invitation does not need an account and we do not identify them. If a guest replies to an RSVP, we store what they typed — their name, whether they are coming, number of guests and, if the host asked for them, a phone number, meal choice, companion names and a message. This is shown only to the host of that invitation, who is responsible for using it only to organise the event. A guest can ask the host, or us, to delete their reply.
Cards shared without an account
A basic card can be shared without signing up. Its content is encoded into the link itself. When you choose a short link or RSVPs, we store the card so the link works — you can ask us to remove it at any time.
How we use this information
- To show your invitation to the people you share it with and to collect their replies for you.
- To run your account, process payments and send account emails (verification, password reset, RSVP notifications, Premium reminders).
- To keep the service secure and to find and fix problems.
- To understand, in aggregate, which occasions and designs people use, so we know what to build next.
We do not sell personal data, and we do not show advertising.
Cookies
We set a strictly necessary cookie to keep you signed in, and store a small note in your browser remembering that you were signed in so pages load correctly. We do not set cross-site tracking cookies. If we add aggregate analytics in future, this policy will say so.
Service providers
- Hostinger — application hosting, database and file storage for uploaded photos and music.
- Paddle.com — our Merchant of Record: processes payments, issues receipts and handles refunds.
- Resend — delivery of transactional email.
- Google — optional Google sign-in.
Each provider processes data only as needed to deliver its service, under its own terms and security commitments.
Retention and deletion
We keep your account and saved invitations while your account exists. You can delete any invitation from your dashboard — this also deletes its RSVP replies and stops its link working. To delete your whole account, email us. Some payment records may be kept where accounting or legal rules require it.
International transfers
Our providers may store data outside your country. Where that happens we rely on their safeguards for lawful international transfers.
Security
Connections are encrypted (HTTPS), passwords are hashed, and access to data is restricted. No system is perfectly secure, but we take care with yours and act promptly on any issue we find.
Children
Invitify is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us information, contact us and we will remove it.
Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Email us and we will respond within a reasonable time.
Changes
We may update this policy. Material changes are reflected in the date above.