Privacy Policy

1. Who we are

InvYtor ("we", "us", or "our") operates the digital invitation platform at https://invytor.com. This policy explains what personal data we collect, why we collect it, and how we handle it.

2. What data we collect

• Account data — name and email address when you sign up.
• Invitation data — event details, names, dates, venues, photos, and welcome notes you enter while creating an invitation.
• RSVP data — guest names and RSVP responses submitted by people who receive your invitation.
• Usage data — pages visited, features used, and browser/device information collected automatically via cookies and logs.
• Payment data — billing details handled securely by our payment processor (Stripe). We never store card numbers.

3. How we use your data

• To provide, operate, and improve the InvYtor platform.
• To send transactional emails (account confirmation, RSVP notifications).
• To process payments and manage your subscription.
• To comply with legal obligations.

We do not sell your data to third parties.

4. Cookies

We use essential cookies to keep you signed in and remember your preferences. We may also use analytics cookies (such as those from Vercel Analytics) to understand how visitors use the site. You can disable cookies in your browser settings, but some features may not work correctly.

5. Data sharing

We share data only with the following categories of service providers who help us operate the platform: cloud hosting (Vercel), database (Supabase), payments (Stripe), and email delivery. All providers are bound by data processing agreements.

6. Data retention

We retain your account and invitation data for as long as your account is active. If you delete your account, your data is permanently removed within 30 days, except where we are required by law to retain it longer.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise any of these rights, contact us at info@incytor.com. We will respond within 30 days.

8. Security

We use industry-standard security measures including HTTPS, encrypted storage, and role-based access controls. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date above and, for significant changes, notify you by email or a banner on the site.

10. Contact

Questions about this policy? Email us at info@incytor.com.