Privacy policy

Last updated: April 2026

What we collect

• Account: email, name, locale
• Event data: title, date, venue, photos, guest names and contacts
• Usage: page views, anonymous analytics (PostHog, EU region)
• Payment metadata: Stripe handles card data - we only store transaction references

Why

To operate the service: create your account, render your invitation, deliver RSVPs, process payments, and improve the product.

Sub-processors

• Supabase (hosting + database, EU)
• Stripe (payments)
• Resend (transactional email)
• Cloudflare (CDN + Turnstile anti-bot)
• PostHog (analytics, EU region)
• Vercel (application hosting)

Your rights (GDPR)

Export, correction, deletion, portability - request via hello@yougotinvited.com. We respond within 30 days.

Retention

Active events are kept while your account exists. After deletion, data is purged within 30 days from backups.

No sale of data

We do not sell or rent personal data. Ever.