Invitated makes digital wedding invitations: a page a couple sends to their guests, which the guests open, explore and reply to. This policy explains what we collect about the couples who use Invitated and the guests who open their invitations, why we collect it, who else handles it, and what you can ask us to do with it.
In this policy, “Invitated”, “we” and “us” mean the team behind invitated.com and portal.invitated.com. “You” means anyone who visits the site, buys from us, or opens an invitation made with us.
1. What we collect
When you send us an enquiry
The contact form asks for your name, email address, country, phone number, the kind of event you are planning and anything else you want to tell us. Name, email and event are required; the rest is up to you.
When you buy
Payments are taken by Stripe. You enter your card details on Stripe’s page, not ours, and we never see or store your full card number. Stripe tells us your name, email address, the package you bought, the amount and whether the payment went through.
When you use your dashboard
Your account is your email address and a password (stored only as a secure hash). Inside it you add what your invitation says: your names, the date, the venue, the day’s timeline, the dress code, photos, music and any other words you choose to include.
When a guest replies to an invitation
The RSVP form collects the guest’s name, whether they are coming, and, where the couple has asked for them, an email address, phone number and a note. The reply goes to the couple’s guest list.
When you talk to us
If you write to us by email, WhatsApp or Instagram, we keep the conversation so we can help you and so we remember what was agreed.
Automatically
Like any website, our servers receive technical information with each request: your IP address, browser and device type, and the pages you open. The main site uses Google Analytics to see how it is used, and the Meta Pixel to measure whether our advertising works (see section 5). To remember things for the length of a single visit, such as whether you have already seen the opening animation, the site uses your browser’s session storage, which is cleared when you close the tab.
2. Why we use it
- To answer you. An enquiry is read by our team so we can reply and recommend a package.
- To provide what you paid for. Creating your account, building and hosting your invitation, delivering guest replies to your guest list, and, for a custom design, working with you on it.
- To run the business. Keeping payment records, preventing fraud and abuse, and keeping the service secure and working.
- To improve our marketing. Understanding which adverts bring people to the site.
- To send you ideas and news. Only if you ticked the box on the contact form, or once you have bought from us. Every email has an unsubscribe link, and you can also ask us to stop at any time.
Where the law asks for a legal basis, we rely on performing our contract with you (running your invitation), our legitimate interests (answering enquiries, security, improving the service, and telling customers about Invitated), our legal obligations (tax and accounting records) and your consent (ideas and news you asked for, and advertising measurement where it is required).
We do not sell personal information, and we do not use guests’ details for marketing.
3. Guests and the couples who invite them
An invitation belongs to the couple who made it. The couple decides what it says, who receives the link and what the RSVP form asks. We store guest replies on the couple’s behalf and show them only to that couple and to our team when they need help.
Anyone who has the link to a published invitation can open it, so please do not put anything on an invitation you would not want every guest, and anyone they forward it to, to see. Invitations are hidden from search engines. Photos and music you upload are served from public addresses so that guests’ phones can load them quickly.
If you are a guest and want your reply changed or removed, you can ask the couple, or write to us at hi@invitated.com with the invitation’s link and we will take care of it.
4. Who else handles it
We use a small number of services to run Invitated. Each one handles personal information only to do its job for us:
- Vercel: hosts the website, the invitations and the dashboard.
- Supabase: our database, sign-in and file storage (accounts, invitations, photos, music and guest lists).
- Stripe: payments.
- Telegram: new enquiries are sent to our team as a private message.
- Our email provider: sends sign-in links, password resets and our replies to you.
- GoHighLevel: keeps our list of enquiries and customers, sends the emails that help you finish your invitation, and sends ideas and news, only to those who agreed and to customers.
- Google: statistics about how the main site is used, through Google Analytics.
- Meta: advertising measurement through the Meta Pixel.
- WhatsApp and Instagram: only if you choose to reach us there.
Some of these companies store information outside your country, including in the United States. Where the law requires it, they do so under safeguards such as standard contractual clauses. We may also disclose information if the law requires it, or to a buyer if Invitated is ever sold, under this same policy.
5. Cookies and advertising
The main site loads Google Analytics, which sets cookies so we can count visits and see which pages are read and which adverts brought people to them. Google gives us these figures in aggregate; we do not use them to identify you. It also loads the Meta Pixel, which sets cookies so Meta can tell us when a visit began with one of our adverts, and may use that visit to show you our adverts on Facebook and Instagram. You can limit this in your browser’s cookie settings, in Meta’s ad preferences, or with a tracker blocker; the site works the same without it. The dashboard uses only the cookies it needs to keep you signed in. Invitations themselves carry no advertising trackers, and we do not measure guests’ visits to them.
If you visit from Europe, the main site asks before it sets any of these cookies, and runs without them until you agree. You can change your answer at any time: .
6. How long we keep it
- Enquiries that do not become an order: up to 12 months, then deleted.
- Invitations stay live until your wedding date and for two months after it. We then take them offline. Your account, content and guest list are kept so you can look back at them until you ask us to delete them.
- Payment records: as long as tax and accounting law requires, even if the account is deleted.
- Server logs: kept for a short period by our hosting providers.
7. Your rights
Depending on where you live, you may have the right to see the personal information we hold about you, to have it corrected or deleted, to receive a copy of it, to object to or limit how we use it, and to withdraw consent you gave earlier. To do any of these, write to hi@invitated.com. We will reply within 30 days and may need to confirm who you are first. You can also complain to the data protection authority where you live.
You can delete most of what is in your invitation yourself, at any time, from your dashboard.
8. Security
Everything travels over encrypted connections. Passwords are stored only as hashes, each couple can reach only their own invitation and guest list, and access on our side is limited to the people who need it. No system is perfectly secure, but if something ever goes wrong in a way that affects you, we will tell you.
9. Children
Invitated is for adults planning an event. We do not knowingly collect information from children under 16 except where a couple lists a child among their guests. If you believe a child has given us their information, write to us and we will delete it.
10. Changes
If we change this policy, we will update the date at the top of this page. If a change materially affects how we use information you have already given us, we will tell couples with accounts by email before it takes effect.
11. Contact
Questions about privacy go to hi@invitated.com.
See also our Terms of Service. Back to Invitated