1. Who we are

InviteTools provides tools for creating online event invitations, managing guests, and collecting RSVPs. For privacy questions about the Service, contact us at hello@invitetools.com.

Our roles.

• InviteTools account and Service data. If you are a host (account holder), we generally act as a data controller for your account, profile, invitations, and related Service usage data.
• Guest and RSVP data. For information you collect from guests through your invitations, you are generally the data controller and InviteTools acts as a processor/service provider handling that data on your instructions.
• Paid subscriptions. Paid plans are sold by Paddle.com Market Ltd (“Paddle”), our merchant of record. Paddle acts as an independent controller for payment, billing, tax, and checkout data related to your purchase. Paddle’s privacy policy applies to that processing: paddle.com/legal/privacy.

2. Information we collect

Account and profile information

When you register or update your account, we may collect your name, email address, password (stored in hashed form), profile details, subscription plan, notification preferences, and avatar image if you upload one.

Invitation and event information

When you create invitations, we store event details you provide (such as titles, descriptions, dates, locations, images, templates, RSVP settings, and optional metadata like agendas or gift registry links).

Guest and RSVP information

When guests respond to invitations, we may process information submitted through RSVP forms, such as name, email address, attendance status, plus-one details, meal preferences, dietary restrictions, and optional messages. Guests may access invitations via public links, passwords, personal invite links, or email verification depending on your settings.

Payment and billing information

If you purchase a paid plan, checkout and recurring billing are handled by Paddle on Paddle’s secure checkout page. Paddle collects payment card details, billing address, and other information needed to process payment and applicable tax.

InviteTools receives and stores only the billing-related information needed to provide the Service, such as:

• Subscription plan, billing interval, and status
• Transaction amounts, currency, and payment dates
• Paddle subscription and transaction reference identifiers
• Internal invoice summaries shown in your account

We do not store your full payment card number or card security code on InviteTools servers.

Support and communications

If you contact support, we collect the information you provide (such as your message, email, and attachments) to respond and improve the Service.

Automatically collected information

We automatically collect certain technical data, including IP address, browser type, device information, pages viewed, referring URLs, and timestamps. We use cookies and similar technologies as described in our Cookie Policy.

Social sign-in

If you sign in with a third-party provider (such as Google, Facebook, or Apple), we receive information from that provider according to your settings with them (typically name, email, and a provider user identifier).

3. How we use information

We use personal information to:

• Provide, maintain, and secure the Service
• Create and publish invitations, process RSVPs, and display guest lists to authorized hosts
• Activate and manage paid plans based on subscription status received from Paddle
• Send service-related communications (such as account verification, security alerts, and subscription notices)
• Respond to support requests
• Monitor usage, troubleshoot issues, and improve features
• Enforce our Terms of Service and protect against fraud or abuse
• Comply with legal obligations

We do not sell your personal information. We do not use guest RSVP data for third-party advertising.

4. Legal bases (EEA, UK, and similar regions)

Where applicable data-protection law requires a legal basis, we rely on:

• Contract — to provide the Service you request
• Legitimate interests — to secure, improve, and operate the Service in a proportionate way
• Consent — where required (for example, non-essential cookies or optional marketing)
• Legal obligation — where we must retain or disclose information by law

Hosts are responsible for establishing their own legal basis and notices when collecting guest information. Paddle determines its own legal bases for payment processing as merchant of record.

5. How we share information

We may share personal information with:

• Paddle — when you purchase or manage a paid plan, we share information needed to initiate checkout and reconcile subscription status (such as your account email and selected plan). Paddle processes payment and billing data under its own privacy policy.
• Service providers — hosting, email delivery, analytics, authentication, and customer support vendors that process data on our behalf under contractual safeguards
• Other users — invitation content and RSVP responses you choose to make visible (for example, published invitation pages or shared guest lists)
• Legal and safety — authorities or parties when required by law, court order, or to protect rights, safety, and security
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to continued protection of personal information

6. Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Billing summaries in your account may be kept for the period required by tax and accounting laws. When you delete invitations or close your account, we delete or anonymize data within a reasonable period unless we must retain certain records for legal, security, or backup purposes.

7. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (HTTPS), access controls, and secure password storage. Payment card data is collected and stored by Paddle, not on InviteTools servers. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing. You may also withdraw consent where processing is consent-based.

• Account settings — update profile information in your account
• Invitations and guests — manage or delete invitations and guest records from your dashboard
• Billing summaries — view subscription and invoice details under Account → Billing & invoices
• Marketing — opt out of promotional emails using unsubscribe links or by contacting us
• Cookies — manage preferences as described in our Cookie Policy

InviteTools account data: email hello@invitetools.com. We may verify your identity before responding.

Payment and checkout data: contact Paddle using the link in your receipt or via paddle.net, because Paddle is the merchant of record for purchases.

You may lodge a complaint with your local data-protection authority where applicable.

9. Guest and invitation visitors

If you RSVP or view an invitation without an InviteTools account, the host controls what information is collected. RSVP data is shared with the host and processed by InviteTools to provide the Service. If you have questions about how a host uses your information, contact the host directly. For requests related to data we hold as a processor, we may direct you to the host or assist them in responding.

10. International transfers

We may process and store information in countries other than where you live. Paddle and other providers may process data in the United Kingdom, United States, European Union, or other locations where they operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

11. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may be communicated by email or in-product notice where appropriate.

13. Contact

Privacy questions about InviteTools: hello@invitetools.com.

Payment privacy questions: Paddle privacy policy.