Privacy Policy

1. Who we are

Inviteo ("we", "us") provides invitation pages with RSVP collection at inviteo.design. Inviteo is operated by Karem Ben Chikha, a sole proprietor in Quebec, Canada, 976 Rue Lacasse, Montréal, QC H4C 2Z2, Canada.

Person in charge of personal information. Karem Ben Chikha is responsible for the protection of the personal information we hold, as Quebec's private-sector privacy law requires. For privacy questions, or to exercise any of the rights below, write to hello@inviteo.design.

For your own account data, we are the controller. For the data you enter about your event, including your guest list and the replies your guests send, you are the data controller and Inviteo acts as your processor. You decide who is on your guest list and what you record about them, so add only people you have a reason to contact about your celebration.

2. What we collect

Account data. Your name and email address. If you sign in with Google, we receive your name, email address, and profile picture from Google, never your Google password.

Event data. Whatever you choose to put on your invitation: names, date, venue, contact phone, your messages, and an optional song selection.

Guest RSVP data. When a guest responds, we store the name they enter, their attendance status, party size, and any message. A guest who is attending may give an email address to receive two reminders about that event, 3 days and 1 day before; each reminder has an unsubscribe link, and the hosts can see the address on their guest list.

Analytics data. Only if you accept analytics cookies (on the marketing site or in the studio): pages viewed, basic device information and, where enabled, session replays with every form field masked. Replays only start after you accept. Vercel Web Analytics and Speed Insights count page views and page speed without cookies or personal identifiers. For signed-in accounts, our servers record product events linked to your account (for example signing up, creating an event, publishing), without cookies, because we need them to provide and improve the service (performance of a contract and legitimate interests). When you sign up, we also keep how you first found us: the referring website, campaign tags in the link and the first page you visited, held in your browser tab until then, never in a cookie. These server events carry your country, never your IP address. Guests are never identified: we count invitation views and replies per invitation, without cookies. See the Cookie Policy for the categories of cookies we use and how to change your choice.

Payment data. When you pay to publish, Stripe processes the payment and we store only the outcome: which plan, the amount, and Stripe's reference for it. Your card number never reaches our servers.

Guest list. If you build a guest list, we store the names, phone numbers, email addresses, household and notes you enter, and a personal invitation link for each guest. A guest who replies through their link, or with a phone number already on your list, is matched to that entry. A guest may also give a phone number when replying.

Maktoub (optional). If a host turns on Maktoub, the rose ritual, guests aged 18 or over can choose to take part. A participant gives a display name, gender, birth year, a photo, an email address for their private link, and at least one contact they choose to share (phone, email or Instagram). Other participants at the same celebration see the display name, age and photo. Shared contacts are revealed only when two participants send each other a rose (a match). Roses beyond the first free one are paid through Stripe. Hosts never see participants' profiles, photos or contacts, only counts and any reports. Before a photo is stored we re-encode it and remove its metadata, including any location the camera recorded. Photos are stored privately with Supabase in Canada and shown through links that expire.

Emails and notifications. We email you about your account and your events (sign-in links, new replies, receipts, reminders) and, unless you unsubscribe, occasional tips and product news. Maktoub participants receive their private link by email. Emails are delivered by Resend, and we keep a log of what we sent you. If you turn on notifications in Settings, we store the push address your browser gives us and use it to tell you when a guest replies.

3. Why we use it, and our legal basis

• To provide your invitation, RSVP dashboard, and account: performance of a contract.
• To take payment and keep records of it: performance of a contract and legal obligation.
• To keep the service secure and prevent abuse: legitimate interests.
• To measure and improve our marketing site: consent, which you give or refuse in the cookie banner and can change at any time.
• To send you service emails about your own events: performance of a contract.
• To send you tips and product news: consent or, where the law allows, legitimate interests. Every such email has a one-click unsubscribe.
• To send push notifications: consent, which you give by turning them on.
• To run Maktoub for guests who choose to take part: consent, given when joining, which a participant can withdraw by writing to us.
• To send a guest the two reminders they asked for: consent, given by entering an email on the RSVP form, and withdrawn with the unsubscribe link in any reminder.

We do not sell your data or your guests' data, and we do not use it to train machine-learning models. If you are a California resident, this means Inviteo does not sell or share personal information as those terms are defined by the CCPA/CPRA.

4. Who we share it with

Guest RSVP responses are visible to you, the event owner, in your dashboard. Beyond that, we share data only with the processors that run the service:

• Supabase: database, authentication and file storage, including Maktoub photos (data stored in Canada, Montreal region).
• Vercel: application hosting and delivery; every page request passes through its network (United States).
• Stripe: payment processing and receipts when you publish or a participant buys a rose.
• Resend: email delivery (United States).
• PostHog: analytics, as described in section 2 (United States).
• Google: only if you choose to sign in with Google.
• Apple (iTunes): song search during design queries Apple's iTunes Search API; if you add a song, guests' browsers stream a 30-second preview clip directly from Apple's servers.
• Your browser's push service (Apple, Google or Mozilla): delivers the notifications you turned on.

5. Transfers outside Quebec

Your account and event data, including guest lists and replies, is stored with Supabase in Canada. Some processors above handle personal information outside Quebec, mainly in the United States: Vercel (every request to the site), PostHog (analytics), Resend (emails) and Stripe (payments). Before communicating personal information outside Quebec, we assess whether it will be adequately protected, considering how sensitive it is, why it is sent, the safeguards in each provider's contract and the laws of the country it goes to, as section 17 of Quebec's private-sector privacy law requires. Each provider is bound by its data processing terms. Information held in the United States can be accessed by authorities there under US law.

Where data leaves the UK or EEA, transfers rely on the EU-US Data Privacy Framework, Standard Contractual Clauses or an equivalent safeguard. Data in transit is always encrypted.

6. How long we keep it

• Your account and events: while your account is open. Delete your account in Settings and your account, events, guest lists, replies, Maktoub data and photos are deleted immediately, and leave our database backups within 30 days. Delete an event and its guest list, replies, and Maktoub profiles and photos go with it.
• Guest lists and replies: 12 months after the event date (for an event with no date, 12 months after it was created). We then delete the guest list and remove every guest's name, email, phone and message. Only anonymous totals stay on your dashboard: how many replied yes or no, and party sizes.
• Maktoub: a participant's profile and photo are deleted 7 days after the ritual closes, unless they matched. Matches, and the profiles in them, are deleted 90 days after it closes. A participant can also delete their profile and photo at any time with "Remove my profile and photo" on their private page.
• Payment records: 6 years after the end of the year of the payment, as Quebec and Canadian tax law requires. If you delete your account they are kept for that time without any link to you: the amount, date, plan and the invitation's title remain, your account does not.
• Email log and notification settings: while your account is open, or until you turn notifications off.
• Analytics data: up to 12 months.

7. Your rights

You have the right to access the personal information we hold about you, to have it corrected, to receive it in a structured, commonly used format (portability), to have it deleted, and to withdraw your consent at any time without affecting what was done before. In the EU and UK you can also restrict processing or object to processing based on legitimate interests.

Most of this you can do yourself in Settings: edit your name, download all your data ("Download my data", a JSON file), and delete your account. For anything else, write to hello@inviteo.design and we will answer within 30 days.

If you are not satisfied with our answer, you can complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). Elsewhere in Canada, you can contact the Office of the Privacy Commissioner of Canada; in France, the CNIL (cnil.fr); elsewhere in the EU, your local data protection authority; in Tunisia, the Instance nationale de protection des données personnelles (INPDP).

If you are a guest. The host who invited you decides what their guest list holds about you, and you can ask them to correct or remove it. You can also write to us: we will pass the request on, or act on it ourselves where the law requires. Maktoub participants can delete their profile and photo themselves at any time from their private page, or write to us and we will do it.

8. Children

Inviteo is not directed at children under 16, and we do not knowingly create accounts for them. If you believe a child has given us personal data, contact us and we will delete it. Maktoub is for adults only: participants confirm they are 18 or older, and we refuse anyone whose birth year says otherwise.

9. Security

Data is encrypted in transit and at rest. Access to production data is limited to those who need it to operate the service. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant authority as required by law. We keep a register of confidentiality incidents, and notify you and the Commission d'accès à l'information when an incident presents a risk of serious injury.

10. Changes

If we make a material change to this policy, we will update the date above and notify account holders by email before it takes effect.