Privacy
Last updated 27 August 2026.
Two different groups of people appear in this policy: customers who buy an invitation, and their guests. We hold much less about guests, and we never contact them for our own purposes.
If you're a customer
We hold:
- Your email address — this is how you sign in.
- Your event details: title, date, venue, and the wording you write.
- Your chosen web address, and any domain you connect.
- A payment reference from Stripe. We never see or store your card details — those go directly to Stripe.
We use this to run your invitation and to email you about your account. We don't send marketing to it unless you ask us to.
If you're a guest
Someone invited you and gave us your name, and often your email address, so they could send you an invitation. We hold that, plus your reply: whether you're coming, how many, any dietary requirements, and any note you leave.
That information belongs to the couple, not to us. We process it on their instructions. We don't sell it, we don't use it to advertise, and we don't email you except the invitation and reminders the couple asks us to send.
Your reply link contains a private token. Treat it like a key: anyone who has it can see and change your reply. It's deliberately not guessable, and reply pages are excluded from search engines.
Who else is involved
- Stripe — payments. They handle card details; we don't.
- Resend — sends email on our behalf.
- Our hosting provider — runs the servers and database.
- Cloudflare — DNS, and the certificates that keep sites on HTTPS.
We don't use advertising trackers, and we don't sell data to anyone.
How long we keep things
An invitation stays online for 12 months. After that the site is hidden but the data is kept, so a customer can bring it back. If you want it deleted outright, ask us and we'll do it.
Sign-in links expire after 15 minutes and work once. Sessions expire after 30 days. Both are deleted automatically once expired.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@invitationrsvp.com and we'll respond within 30 days.
If you're a guest asking for deletion, the fastest route is usually to ask the couple — it's their guest list. Come to us if that isn't possible and we'll handle it.
Security
Everything is served over HTTPS. Sign-in tokens and session tokens are stored hashed, so a copy of our database contains nothing that could be used to sign in. Each customer's data is isolated: every query is scoped to their account.
Contact
Neo Innovations (202503157588 (KT0593142-M)). Privacy questions: hello@invitationrsvp.com.