Privacy
Policy

• Your e-mail address.
• Your name and public profile photo, if you sign in with Google or Facebook.
• Your invitation data: texts, event details, uploaded images.
• Your guests' replies (attendance, number of people, answers to your RSVP questions).
• Billing details you enter at checkout (name, country, and address where required for the invoice).
• Minimal technical data needed for the platform to work (login session).

• To give you access to the editor and save your invitations.
• To show your guests' RSVPs in your dashboard.
• To process payments and issue invoices or receipts.
• To send transactional e-mails (account confirmation, RSVP notifications, order confirmations).
• To improve the platform using aggregated, anonymized data.

We use the following providers, which may process your data on our behalf:

• Supabase — account and invitation data storage (EU servers).
• Cloudflare — storage and delivery of the photos and videos in your event album.
• Google / Facebook — optional sign-in with your Google or Facebook account.
• Resend — transactional e-mails (account confirmation, RSVP notifications, receipts).
• Stripe — payment processing (card and the other methods offered at checkout, including PayPal). We never store your full card details.
• PayPal — only if you choose to pay with PayPal at checkout.
• Anthropic — AI-generated invitation text, only when you explicitly use this feature; it receives what you type in the form (event type, names, desired tone) solely to generate the text.
• Replicate — AI photo processing in the AI Photo Editor (including an automatic safety check), only when you explicitly start a generation; it receives the selected photo solely to produce the result.
• DeepL — automatic translation of invitation texts, only when you use the translation feature.
• Google Analytics / Google Ads — usage statistics and campaign measurement, only with your consent from the cookie banner (see section 6).

Some of these providers are based outside the European Economic Area (for example in the United States). Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

We do not sell, rent or share your data with third parties for marketing purposes.

You can ask us to delete your account and all associated data at any time. Send an e-mail to contact@invitationline.orgwith the subject "Account deletion" and we will process your request within 30 days. If you signed in with Facebook, the same e-mail also covers Meta's data-deletion requirements — see Data deletion.

Invitations that are not activated within 7 days of being created are deleted automatically, with all their content; we warn you by e-mail at least one day before.

We use functional cookies that are needed to keep you signed in — these are always active, because the platform cannot work without them.

We also use analytics (Google Analytics) and advertising (Google Ads) cookies to understand how the site is used and how effective our campaigns are. These are off by defaultand are only enabled if you click "Accept" in the cookie banner shown on your first visit (Google Consent Mode v2). You can choose "Necessary only" at any time to browse without them.

Under the GDPR, you have the right to:

• access your personal data;
• have inaccurate data corrected;
• have your data deleted (the “right to be forgotten”);
• restrict processing;
• data portability;
• object to processing;
• withdraw your consent at any time.

To exercise any of these rights, e-mail us at contact@invitationline.org. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP — dataprotection.ro) or with the data protection authority in the country where you live.

We use encrypted connections (HTTPS/TLS) and appropriate technical and organizational measures to protect your data. Payment data is processed exclusively in Stripe's secure environment.