Privacy Policy

1. Information We Collect

We only collect information necessary to provide our service:

• Email address: We collect your email address when you sign in with Google OAuth
• Event information: Event details you create (title, description, date, time, location)
• RSVP responses: Guest names and RSVP information submitted through your event pages
• Payment information: Processed and stored by Paddle (our payment provider), not by us

We collect this information by fair and lawful means, with your knowledge and consent.

2. How We Use Your Information

We use your information to:

• Provide and maintain the service
• Display your events and collect RSVPs
• Process your payments through Paddle
• Send you important service updates if necessary

3. Information Sharing

We don't share any personally identifying information publicly or with third parties, except:

• Google: For authentication (covered by their privacy policy)
• Paddle: For payment processing (covered by their privacy policy)
• Supabase: Our database provider where your data is stored securely
• When required by law: We may disclose information if legally required

We will never sell your data to third parties.

4. Data Storage

Your information is stored securely in our database (Supabase) using commercially acceptable means to prevent loss, theft, and unauthorized access. However, no method of electronic storage is 100% secure.

5. Data Retention

We retain your information only as long as necessary to provide you with our service. You can delete your events at any time from your dashboard. If you want to delete your account and all associated data, contact us.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of any inaccurate information
• Request deletion of your information
• Refuse to provide information (though this may limit your ability to use the service)

For EU residents, these rights are protected under GDPR. We act as both data controller and processor.

7. Cookies and Tracking

We use essential cookies necessary for authentication and to keep you logged in. These are required for the service to function. We do not use advertising or tracking cookies.

8. Third-Party Links

Our service may link to external sites (like Google for authentication). We have no control over and are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

9. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us.

10. Changes to This Policy

We may update this policy from time to time. Continued use of our service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or want to exercise your data rights, please contact us at hello@inviteful.io.