Privacy Policy
Your privacy is important to us. Here's how we handle your data.
1. Information We Collect
InviteFree collects the minimum information necessary to provide our invitation service. We may collect:
- Event Information: Event title, date, time, venue, RSVP deadline, dress code, parking information, gift preferences, and any other details you provide when creating an invitation.
- Guest Information: Names, email addresses, phone numbers (if provided), RSVP responses, number of adults and kids attending, dietary preferences, and messages submitted by guests.
- Host Email: If you choose to provide your email address when creating an event (optional).
- Private Links & Tokens: We generate unique tokens for host dashboard access and guest RSVP management to enable secure, account-free access.
- Usage Data: Basic analytics such as page views, browser type, and device type to improve our service.
2. How We Use Your Information
We use the information we collect to:
- Create and host your digital invitations
- Enable RSVP tracking and guest management
- Send you event-related emails (only if you provide your email)
- Improve our service and user experience
- Respond to support inquiries
3. Data Storage & Security
Your event data is stored securely on our servers. We use industry-standard security measures to protect your information from unauthorized access, alteration, or destruction.
We do not sell, trade, or rent your personal information to third parties.
4. Cookies and Tracking Technologies
InviteFree uses cookies and similar tracking technologies in two main categories:
- Strictly necessary cookies: Used to remember basic site preferences and keep certain features working (for example, remembering whether the navbar has been collapsed). These cannot be disabled while still using the site normally.
- Advertising and measurement cookies: Set by our advertising partner Google AdSense. These cookies allow Google and its partners to serve ads based on your visits to this site and other sites on the internet, and to measure the effectiveness of those ads.
You can control or disable cookies in your browser settings. Disabling all cookies may affect some functionality but will not prevent you from using the core invitation features.
5. Third-Party Services and Advertising
We use the following third-party services:
- Google AdSense: Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to InviteFree and/or other sites on the internet. You may opt out of personalized advertising by visiting Google Ads Settings. You may also opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.
- Amazon Web Services (AWS): We use AWS Simple Email Service (SES) to send email invitations on behalf of hosts. AWS receives only the data necessary to deliver the email (recipient address, subject, body) and does not retain message content beyond the delivery window.
- Analytics: We may use basic, privacy-respecting analytics to understand aggregate usage patterns (page views, browser type, country) and improve the service. We do not use Google Analytics or any analytics provider that builds individual user profiles.
6. How Google Uses Data from Our Site
Google's use of data collected through partner sites and apps, including ours, is described at policies.google.com/technologies/partner-sites. We are required by Google to inform users about the cookies and data Google may collect through AdSense, and to obtain consent where required by applicable law (including the EU General Data Protection Regulation and the UK GDPR).
7. Data Retention
Event data is retained for as long as the event is active. We may periodically remove events that have been inactive for an extended period (typically twelve months past the event date). Hosts can delete an event and all associated guest data at any time using the "Delete Event" button on the host dashboard — this deletion is immediate and irreversible. To request manual deletion of any data, please email jimmygen2024@gmail.com.
8. Children's Privacy
InviteFree is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly remove it.
9. Your Rights Under GDPR (European Economic Area, UK)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
- Right to access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure ("right to be forgotten"): request deletion of your personal data, subject to legal retention requirements
- Right to restrict processing: request that we limit how your data is used
- Right to data portability: request a machine-readable copy of your data
- Right to object: object to processing based on legitimate interests or for direct marketing purposes
- Right to withdraw consent: at any time where processing is based on consent
- Right to lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at jimmygen2024@gmail.com. We respond to verified requests within 30 days.
10. Your Rights Under CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) give you the following rights:
- Right to know what personal information we collect, use, and disclose
- Right to delete personal information we have collected
- Right to correct inaccurate personal information
- Right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising
- Right to non-discrimination when exercising your privacy rights
InviteFree does not sell personal information in the conventional sense. However, the use of third-party advertising cookies (such as those used by Google AdSense) may qualify as "sharing" under the CPRA. To opt out, you can:
- Adjust your Google Ads Settings
- Use the Global Privacy Control signal in your browser (we honor it automatically)
- Email us at jimmygen2024@gmail.com with the subject "CCPA Opt-Out"
11. International Data Transfers
Our servers are located in the United States. If you are accessing InviteFree from outside the United States, your information will be transferred to, processed, and stored in the United States, where data protection laws may differ from those in your country. By using the service, you consent to this transfer.
12. Data Security
We implement industry-standard security measures, including HTTPS encryption for all traffic, secure storage of event data on access-controlled servers, and unique unguessable tokens for host and guest links. We do not store passwords because the service does not use accounts. No method of transmission over the internet is 100% secure, but we work continuously to protect your information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. For material changes, we may also notify event hosts via email where contact information is on file. Your continued use of InviteFree after changes are posted constitutes acceptance of the revised policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us at:
Email: jimmygen2024@gmail.com
We respond to all verified privacy inquiries within 30 days.