This policy describes what information Invytely collects, why we collect it, and how we keep it safe. We aim to collect the minimum necessary to provide the Service.
1. Information We Collect
Account information
- Name, email address, hashed password
- Optional: phone number, profile photo (only if you provide them)
Invitation content
- Bride/groom names, family names, story text, photos, event details and venue information that you enter while building your invitation
- Guest list entries (name, phone) you add for personalized links
RSVP responses
- Names, contact info, attendance status, and guest counts submitted by your invitees through the public RSVP form
Payment information
Card details are entered directly into Razorpay’s PCI-compliant checkout. We receive only an order ID, payment ID, and the amount paid — never your full card number, expiry, or CVV.
Usage data
- Aggregate page-view and device data for invitations you publish (shown to you in the dashboard analytics)
- Server access logs (IP, user agent, timestamps) kept for 30 days
- Google Analytics 4 for site-wide visitor metrics (page views, navigation paths, device types). We enable IP anonymization so your full IP is never sent to Google.
2. How We Use Your Data
- To render and deliver your wedding invitation
- To process payments and prevent fraud
- To send transactional emails (purchase receipts, RSVPs, password resets)
- To provide customer support when you contact us
- To improve the Service through aggregate, non-identifying analytics
We do not sell your personal data to third parties, ever. We do not run advertising on the Service.
3. Sharing With Third Parties
We share data only with service providers that help us run Invytely:
- Razorpay— payment processing
- Supabase(PostgreSQL hosting, AWS Singapore) — database
- Netlify— frontend hosting and CDN
- Resend / SMTP provider— transactional email delivery
- Google Analytics— aggregate site analytics with IP anonymization enabled
Each of these providers is contractually bound to handle your data only for the purpose of providing their service to us.
4. Data Retention
- Account & invitations: retained as long as your account is active.
- RSVPs & guest lists: retained alongside the parent invitation; deleted when the invitation is deleted.
- Payment records: retained for at least 7 years to meet Indian tax/accounting obligations.
- Server logs: 30 days, then automatically purged.
5. Your Rights
You may at any time:
- Access, edit, or export your invitation data from the dashboard
- Request deletion of your account by emailing support
- Opt out of marketing emails (we send very few; transactional emails are not optional)
6. Security
We protect your data with HTTPS for all traffic, hashed passwords (scrypt), CSRF tokens on all state-changing requests, and least-privilege access controls inside our infrastructure.
7. Children
The Service is intended for adults planning weddings. We do not knowingly collect data from anyone under the age of 18.
8. Changes to This Policy
We will update the “Last updated” date when changes are made. For material changes, we will email registered users at least 14 days before the new policy takes effect.
9. Contact
Privacy questions or data deletion requests: privacy@invytely.com