Privacy Policy

1. Information We Collect

We collect minimal personal information to provide you with a seamless event planning experience:

• Account Creation: When you create an account with an email address and password, we collect your email address and password to enable cross-device syncing and secure access to your guest lists. An account created with Google Sign-In has no Invyt password (see "Google Sign-In" below).
• Google Sign-In (Optional): Signing up or logging in with your Google account is optional; you can always use an email address and password instead. If you sign in with Google, Google shares your name, email address and profile picture with us, together with your Google account ID. We store your email address, name and Google account ID with your Invyt account, but not your profile picture. If you already have an Invyt account with the same email address, we link your Google account ID to it.
• Guest List Data: You may provide event details (e.g., event name, date, location) and invitee information (e.g., names, contact details). This data is stored on our servers (see section 3).
• Uploaded Images: If you upload an image for an invite, such as a custom cover photo, we store it and make it publicly accessible at its web address, because your invite page displays it. Anyone who has that address can view the image.
• Payment Information: If you opt for a premium plan, we process payments through Stripe, a third-party payment processor. We do not store payment details (e.g., credit card information) on our servers; Stripe handles all payment data securely.
• Guest Phone/WhatsApp Number (Optional, Host-Enabled): A host may choose to enable a field on their event's RSVP form asking guests for a phone or WhatsApp number. This field is entirely optional for the guest — an RSVP can always be submitted without it. If provided, the host may use it to send that guest event reminders and updates. We do not use this number for any purpose other than the reminders and updates the host sends through Invyt.
• Support Chat (Signed-In Hosts Only): Our dashboard, available only to signed-in hosts, includes a support chat provided by Crisp. If you use it, we collect the messages you write, including any contact details you choose to share. The chat widget, which loads on every dashboard page, also processes technical data (your IP address and approximate location, browser and device details, and the dashboard page you are on) and stores identifiers such as cookies to keep your chat session. It is not loaded on the invitation and RSVP pages your guests see or on our public website. Using the chat is optional: you can email us at dev@codingspace.io instead.
• Usage Statistics: We measure how Invyt is used with Plausible Analytics, which we run on our own server (hosted by DigitalOcean), so no analytics company receives this data. It runs on every part of Invyt, including the dashboard and the invitation and RSVP pages your guests see. It does not use cookies and does not collect personal data such as your name or email address. For each page view, it records the page address, the referring website, your browser, operating system and device type, and your country, which is derived from your IP address; your IP address itself is not stored, and unique visitors are counted using a salted hash that changes every day. We also record certain actions, such as which button was clicked, the sign-up method, the event type or an RSVP status, without names, email addresses, question text or the content of invites.
• Referral Source: When you first arrive at Invyt, we save in your browser's local storage how you got here: a referral code or campaign tags in the link you followed, or the website that sent you. We keep only that first source and use it to attribute a later sign-up or purchase to it in our analytics. It is not stored in a cookie.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your Invyt account, allowing you to sync guest lists and event details across devices.
• To process payments for premium plans via Stripe, enabling access to features like larger guest lists.
• To communicate with you about account-related matters (e.g., password resets) or updates to Invyt's features and services.
• To send event reminders and updates by SMS or WhatsApp, via our messaging provider Twilio, when a guest has voluntarily provided a phone or WhatsApp number on an RSVP form where the host has enabled this optional field.
• To respond to support requests you send through the in-dashboard chat.
• To understand how Invyt is used and improve it, using our self-hosted, cookieless analytics, and to measure which referral links and campaigns lead to sign-ups and purchases.
• To let you sign up and log in with your Google account, if you choose to.
• To send hosts service emails through MailerSend: password-reset emails you request, a notification when a guest accepts your invite, and reminders to share your invite after you create an event or wedding hub. Guests do not receive emails from Invyt.
• To store the images you upload and display them on your invite pages.
• To show prices in the right currency for your country and set up checkout accordingly, and to preselect your country's dialling code in the optional phone field on the RSVP form, using the approximate country that Vercel, which hosts our website, derives from your IP address.

3. Data Storage and Local Functionality

Your account, events and guest lists are stored in our database, which runs on backend servers hosted by DigitalOcean; our website and app frontend are hosted by Vercel (see section 4). Images you upload for an invite are stored with DigitalOcean in the United States and can be viewed by anyone who has their web address. Invyt also keeps some information in your browser's storage (such as localStorage): while you are signed in, your sign-in session and a copy of your account details and events; on a guest's device, a copy of that guest's own RSVP reply, so the invite can show that they have already replied; and the referral source described in section 1. If you choose a language on our website, we remember your choice in a cookie. The support chat (section 1) and Google Sign-In (section 4) may also store their own cookies or identifiers in your browser. You are responsible for securing the data stored on your device.

4. Sharing Your Information

We do not sell, trade, or share your personal information with third parties, except in the following cases:

• Stripe: If you purchase a premium plan, Stripe processes your payment information. Please review Stripe's Privacy Policy for details on how they handle your data.
• Twilio: If a host enables the optional phone/WhatsApp reminder field for their event and a guest provides a number, we share that number with Twilio, our messaging service provider, solely to deliver the SMS or WhatsApp reminders the host sends. Please review Twilio's Privacy Policy for details on how they handle this data.
• Crisp: Crisp IM SAS, a company based in France, provides our in-dashboard support chat. Crisp processes your chat messages and the technical data described in section 1 so that we can answer you. We do not send Crisp your guest lists, event details or payment information, but anything you write in the chat is processed by Crisp. Please review Crisp's Privacy Policy for details on how they handle this data.
• Google: If you choose to sign up or log in with Google, Google confirms your identity to us and shares the account details described in section 1. To offer this option, we load Google's sign-in script on most pages of our public website, including the homepage, landing pages, pricing, the blog index, and the sign-up and log-in pages, but not on individual blog posts, the dashboard, or the invitation and RSVP pages your guests see. When the script loads, Google receives technical information such as your IP address and browser details and may use its own cookies, even if you do not sign in with Google. On the sign-up and log-in pages, Google may also show its own sign-in prompt. Please review Google's Privacy Policy for details on how Google handles this data.
• DigitalOcean: DigitalOcean, LLC, a US company, hosts our backend servers (which run our API), our database (which holds accounts, events and guest lists) and our self-hosted analytics, and stores the images you upload. Uploaded images are stored in DigitalOcean's San Francisco region in the United States, and your other data may also be transferred to or accessed from the United States. DigitalOcean states that it is certified under the EU-U.S. Data Privacy Framework (including the UK Extension and the Swiss-U.S. Data Privacy Framework), and its data processing agreement provides for the European Commission's Standard Contractual Clauses if that framework no longer applies. Please review DigitalOcean's Privacy Policy for details on how they handle data.
• MailerSend: We send all our emails through MailerSend, Inc., a US email delivery provider, from noreply@invyt.app. We email hosts only, never guests: password-reset emails, a notification when a guest accepts your invite (containing the guest's name, the names of any plus-ones and the event name), and reminders to share your invite after you create an event or wedding hub. MailerSend therefore receives your email address and the content of these emails, including those guest names. Please review MailerSend's Privacy Policy for details on how they handle this data.
• Vercel: Vercel Inc., a US company, hosts our website and app frontend: our public pages and blog, sign-up and log-in, the dashboard, and the invitation and RSVP pages your guests see, which are generated on Vercel's servers using event details. Every page you open on our website is served by Vercel, which receives technical information such as your IP address, browser details and the page requested, and our pricing and checkout requests also go through Vercel. The information you enter in the app, such as RSVP replies, guest lists and account details, is sent directly to our backend on DigitalOcean. Vercel also tells us your approximate country, based on your IP address. We use it only to choose the prices, currency and payment options for our pricing page and checkout, and to preselect the dialling code in the optional phone field on the RSVP form; if you start a checkout, we keep the country with the record of that checkout. Vercel states that it is certified under the EU-U.S. Data Privacy Framework, and its data processing addendum includes the European Commission's Standard Contractual Clauses. Please review Vercel's Privacy Policy for details on how they handle data.
• Legal Requirements: We may disclose your information if required by law or to protect the rights, safety, or property of Invyt, our users, or the public.
• International Transfers: Stripe, Twilio, Google, DigitalOcean, MailerSend and Vercel are based in, or belong to groups based in, the United States, so your information may be transferred to, or accessed from, the United States when they process it. Each of them states that it is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as ensuring adequate protection for data transferred to certified companies. Where that framework does not apply, we rely on other safeguards recognised under EU data protection law, such as the European Commission's Standard Contractual Clauses.

5. Security of Your Information

We use reasonable measures to protect your data, including encryption for data transmission (e.g., during syncing) and secure storage practices. However, data stored locally on your device is your responsibility to secure. No method of internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security.

6. Your Choices

• Account Deletion: You can delete your Invyt account at any time by contacting us at dev@codingspace.io. Upon deletion, your email, password, and synced guest list data will be removed from our servers. Your support chat history is stored by Crisp rather than on our servers; if you want it deleted as well, say so in your request. Local data on your device may remain until manually cleared.
• Opt-Out of Communications: You can opt out of non-essential emails, such as the reminders to share your invite after you create an event, by contacting us at dev@codingspace.io.

7. Children's Privacy

Invyt is not intended for users under 13 years old. We do not knowingly collect personal information from children under 13. If we learn that we have collected such data, we will delete it promptly.

8. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant updates via email or through Invyt. The updated policy will be effective as of the date posted.

9. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us at:

• Company: Randes Digital Labs, The Netherlands
• Email: dev@codingspace.io
• Website: https://invyt.app