Privacy Policy

This policy explains how InviteBatch ("InviteBatch", "we") handles personal data. We are the data controller for customer data. Contact: support@invitebatch.com, [registered office address].

What we collect

From customers (the person who orders):

• email address and payment confirmation details from Stripe or PayPal (we never see or store your full card number);
• your event details, design choices, optional photo and guest list;
• whether you agreed to receive occasional offers;
• technical records needed to deliver and protect your order (IP address, device type, download and email delivery times).

About guests (people on your guest list):

• the names you enter, and the replies guests give on their invitation page (attendance, meal choice, dietary notes, answers to your questions, an optional message and optional email).

Dietary notes can reveal health or religious information. Guests choose whether to share them, and they are shown only to the host who ordered the invitations.

Why we use it

• to create and deliver your invitations, RSVP pages and dashboard (performance of our contract with you);
• to prevent fraud and abuse and to handle refunds and payment disputes (legitimate interests and legal obligations);
• to send you occasional offers, only if you opted in or are an existing customer who did not opt out (you can unsubscribe at any time).

We do not sell personal data and we do not use your guest list for marketing.

Who we share it with

Only service providers that help us run InviteBatch: Cloudflare (hosting, storage, security), Stripe and PayPal (payments), Resend (email delivery) and, if you choose "Save to Google Drive", Google (the file is sent directly from your browser to your own Drive). Some providers are based in the United States; transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.

How long we keep it

Order and guest data is kept for 24 months after your event so you can return to your RSVPs and re-download your files, then deleted. Payment records are kept for 6 years for tax and accounting. Unpaid drafts and photos are deleted automatically within a few days. You can ask us to delete your order earlier.

Cookies and analytics

We use only essential storage needed for the site to work (for example, remembering your draft on your own device). We use privacy-friendly analytics that do not use cookies. If we ever add advertising or tracking cookies, we will ask for your consent first.

Your rights

Under UK GDPR (and similar laws in the US and Canada) you can ask to access, correct, export or delete your data, and to object to marketing. Email support@invitebatch.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Security

Private pages use long random links, payments are handled by Stripe or PayPal, and data is encrypted in transit. No system is perfectly secure, so please keep your private links private.