Privacy Policy

The service is an online tool for creating and sharing digital invitations. The controller of the personal data described below is [COMPANY DETAILS TBD] (legal name, registered address and registration number). Questions about this policy and all requests about your data go to [PRIVACY CONTACT EMAIL TBD].

• Invitation content. Everything you type when you build an invitation: the occasion, title and wording, date and time, place, the host name you display, and the guest names you add.
• Contact details. The email address (and, where you choose to use it, the phone number) you use to sign in, to receive the management link and to get notifications about your invitation.
• Guest responses. What a guest submits on your invitation page: their name, whether they are coming, the number of people, and an optional message.
• Photos you upload. A photo is optional and is used for one purpose only — generating the artwork for your invitation cover.
• Purchase records.If you buy AI generations, we store what was bought, when, and for how much. Card details are entered on the payment provider's side and never reach our servers. Provider: [PAYMENT PROVIDER TBD].
• Technical data. IP address, browser and device type, referring page, and the pages opened on our site — collected in server logs and, if you allow analytics cookies, in aggregated statistics. See the Cookie Policy.

• To provide the service — to build your invitation page, show it to the people you send the link to, collect and display RSVPs, keep your wishlist, and deliver the generations you paid for. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
• To generate cover artwork from a photo you upload — only when you upload one. Legal basis: your consent, Art. 6(1)(a) GDPR; the photo may reveal biometric-adjacent detail, so you can withdraw consent and delete it at any time.
• To keep the service secure and working — abuse and fraud prevention, rate limiting, error diagnostics, aggregated usage statistics. Legal basis: our legitimate interest in a service that stays up and is not abused, Art. 6(1)(f) GDPR.
• To keep records of payments where accounting and tax rules require it. Legal basis: legal obligation, Art. 6(1)(c) GDPR.

We do not use your data for automated decisions that produce legal effects for you, and we do not sell it.

Uploading a photo is never required to create an invitation. When you do upload one, it is sent to an AI image provider to produce the cover for that invitation and for nothing else. The generated cover is shown on your invitation page; the source photo is not published as a separate image. You can delete the generated cover and the uploaded photo from your invitation, and ask us to erase them from our storage.

AI generation providers acting as our processors: [AI SUB-PROCESSORS TBD].

When you add guest names, you decide what to enter about other people; we process those details on your instructions in order to deliver the invitation and record the answers. Please add only what you actually need. A guest can ask you — or us, at the contact address below — to correct or remove their entry and their response.

Only service providers that we need in order to run the service, each bound by a data processing agreement: hosting and content delivery, email and messaging delivery, the payment provider, the AI generation providers, and web analytics. Current list: [SUB-PROCESSOR LIST TBD]. We also disclose data where the law obliges us to.

Your invitation page itself is public to anyone who has the link — that is the point of the product. Do not put anything on it that you would not want a link recipient to forward.

Hosting region and any transfers outside the EEA, together with the safeguards used for them (such as Standard Contractual Clauses): [HOSTING REGION AND TRANSFERS TBD].

We keep invitation data while the invitation exists and while your account exists. Delete an invitation and its content and guest responses go with it. Payment records are kept for as long as accounting rules require. Server logs are short-lived and used for security and debugging.

Under the GDPR you can, at any time:

• Access the personal data we hold about you and get a copy of it (Art. 15).
• Correct anything inaccurate (Art. 16).
• Erase your data — an invitation, an uploaded photo, or your whole account (Art. 17).
• Restrict or object to processing based on our legitimate interests (Art. 18 and 21).
• Take your data with you in a structured, machine-readable format (Art. 20).
• Withdraw consent — for a photo upload or for analytics cookies — without affecting what was lawful before you withdrew it (Art. 7(3)).
• Complain to the data protection authority of your country of residence (Art. 77). Our lead supervisory authority: [SUPERVISORY AUTHORITY TBD].

Write to [PRIVACY CONTACT EMAIL TBD] and we will answer within one month, as Art. 12(3) requires.

The service is meant for adults organising a celebration — including parents creating an invitation for a child's party. We do not knowingly create accounts for children, and a child's name on an invitation is entered by the adult who hosts the event.

If we change how we handle personal data, we update this page and the date above. Material changes are announced on the site before they take effect.