Privacy Policy
1. Who is responsible
, , operates and decides how the information described here is used. Questions or requests: . Our grievance officer is named on the Contact & Grievances page.
If you are a host and you put other people's names or phone numbers into an invitation, you decide what is entered, and we handle it on your behalf to run the service.
2. What we collect
From hosts (people who create invitations)
- Invitation content you enter: names, message, event dates, times and venues, map links, language and style.
- A WhatsApp phone number, if you choose to add one.
- Photos, if you add them on a paid plan. Photos are shrunk in your browser and camera or location data is removed before upload.
- A private-link secret. We store only a scrambled (hashed) version of it, not the secret itself.
- Plan and payment records: which invitation was upgraded, the plan, amount, currency, payment provider, status, time and the provider's reference number.
From hosts who post live news or a thank-you note (optional)
- The short news posts and thank-you note you write. They are shown to everyone who opens the invitation link, so do not put private information in them. They are deleted with the invitation, and you can delete a news post yourself at any time.
From hosts who save an invitation to their email (optional)
- Your email address, the invitations you saved to it, and your sign-in sessions (kept for up to 30 days in this browser).
- The one-time sign-in links we email you. We store only a scrambled (hashed) copy of each, and they expire after 15 minutes or on first use.
From hosts who add co-hosts (optional)
- A label you type for each co-host (for example "Mom"), when their link was last opened, and a scrambled (hashed) copy of their private link. We do not ask for their name or email.
- A co-host can see the guest names, phone numbers and replies of that invitation, so only share a co-host link with people you trust. Removing a co-host stops their link at once, and co-host records are deleted with the invitation.
From planners who use an account for clients (optional)
- A business name, which is shown on the invitations, video end-cards and printed cards saved to your account, and a client label for each invitation, which only you see.
- Planners decide what guest information they enter for their clients and are responsible for having permission to do so. We handle it on the planner's behalf to run the service.
For everyone: anonymous usage counts
- To understand which parts of the site work, we add one to a daily counter when something happens (a page is opened, an invitation is published, a reply is sent, a plan is bought). Each counter is only a name and a number per day. No address, cookie, identifier or content is stored, so a count cannot be traced to a person. Browsers that send Do Not Track or Global Privacy Control are not counted. Counters are deleted after 400 days.
For everyone: protection against abuse
- To stop automated abuse we count requests per connection address. We keep only a scrambled (hashed) form of the address, never the readable address, and the counter is deleted within an hour.
From people who send a done-for-you request
- Name, phone number (WhatsApp), city, first event date and any notes you write, and an email address if you give one. We use these only to reply to your request and to deliver the service if you go ahead.
From hosts who save a guest list (optional)
- The names, WhatsApp numbers and groups of the people you add, when and whether you used "invite" or "remind" for each, and which of them has replied. Only the host can see this list, and it is deleted with the invitation. Please add only people who expect to hear from you, and see section 8 if a guest asks you to remove them.
- We never send messages to your guests ourselves. "Invite" and "remind" open WhatsApp on your device with a message ready, and you press Send.
From guests
- The name a guest types, their reply (yes, maybe or no), the number of people, and the time of the reply.
- If the host used a personal link, the guest's name is part of the link's address (
g=), so it also appears in our server logs.
Technical information
- Our hosting provider, Cloudflare, processes visitors' IP addresses, browser details and request logs to deliver the site and keep it secure.
What we do not collect
- We do not collect passwords, card numbers, UPI IDs or bank details, and we do not require an email address. Payments are made on the pages of Razorpay or Stripe, who process that information under their own policies.
- The guest list you paste in to make personal videos stays in your browser. It is not sent to us. Videos are made on your device and are not uploaded.
3. Information stored in your browser
When you publish, your browser keeps your private-link secret (in local storage under the name inviso:mine) so you can come back and edit. If you sign in with your email, it also keeps your sign-in session (inviso:session) until you sign out or it expires after 30 days. While you build an invitation, the text you have typed is also kept in this browser (under the name inviso:draft, for up to 30 days, never sent to us) so you do not lose it; it is removed when you publish or choose to start fresh. We do not use advertising or tracking cookies and we do not use third-party analytics. The payment providers' pages may set their own cookies while you pay.
4. Who can see what
- Anyone who has an invitation link can see everything on that invitation page, including the names, dates, venues and photos, and the host's WhatsApp number if one was added. The page is not password protected and is marked to stay out of search engines, but you should only share the link with people you want to see it.
- The host (anyone with the private dashboard link) can see all replies to that invitation.
- Other guests cannot see each other's replies.
5. Why we use information
- To create, show and update invitations, and to collect and show replies (to provide the service you asked for).
- To take payment, activate plans and keep records the law requires.
- To keep the service secure, prevent abuse and fix problems.
- To answer your messages and requests.
Where the law asks for consent, we rely on it: for a host, by entering and publishing the information; for a guest, by choosing to send a reply. A guest can decide not to reply.
6. Who we share it with
- Cloudflare: hosting, our database and delivery of the site.
- Our email provider (Resend): if you ask for a sign-in link, it receives your email address and the link in order to deliver the message.
- Razorpay (India) and Stripe: payments. They receive the details needed to take payment and tell us whether it succeeded.
- WhatsApp and Google Maps: if a guest taps a button that opens them, that service receives what the button sends (for example a reply message or a venue search). We do not control them.
- Authorities or advisers, if the law requires it or to protect rights and safety.
- A successor business, if we are sold or reorganised, under the same promises.
We do not sell personal data and we do not show advertising. Our providers operate in several countries, so information may be processed outside India. We choose providers that use recognised security practices.
7. How long we keep it
- Invitations, replies, photos and guest lists: until you delete them from your dashboard, or until we remove them 12 months after the last event date on the invitation, whichever is first.
- Email accounts: until you delete your account on the "My invitations" page. An account with no saved invitations is also removed 12 months after it was created.
- Done-for-you requests: deleted 12 months after we receive them, or sooner if you ask.
- Payment records: kept for as long as tax and accounting law require. They contain no invitation content.
- Server logs: kept by Cloudflare for the period set in its own policy.
8. Your choices and rights
- Delete: hosts can delete an invitation, all its replies and all its photos from the dashboard. It is immediate and cannot be undone. If you signed in with an email, you can also delete your account (your email address and sessions) from the "My invitations" page.
- Access, correction and erasure: you can ask us what we hold about you, ask us to correct it, or ask us to erase it. A guest who wants a reply removed can write to us with the invitation link and the name they used, or ask the host. We may need to confirm who you are first.
- Withdraw consent: you can withdraw consent at any time, which may mean we can no longer provide some features.
- Complaints: please contact our grievance officer first. Depending on where you live, you may also have the right to complain to a data protection authority, such as the Data Protection Board of India, once our grievance process has been tried.
We will reply to requests within the time the law allows, and in any case within working days to acknowledge them.
9. Children
The service is meant for adults. We do not knowingly collect information directly from children under 18. Hosts may mention children in an invitation, and are responsible for having permission to do so.
10. Security
We use encrypted connections, store the private-link secret in hashed form, and limit who can reach the database. No online service is completely secure. If a breach affects your personal data we will tell the people and authorities concerned as the law requires.
11. Changes
If we change this policy we will update the date above. If a change is significant we will make it clear on the site.