Pending legal review. This text describes how InviteKeep works today in plain English; highlighted items in [brackets] are still to be filled in.
Privacy policy
Last updated 23 October 2026
This policy explains how [Legal entity name], [registered address] (“InviteKeep”) handles personal data. We have written it for two kinds of people: hosts, who create events, and guests, who receive invitations. Questions: privacy@invitekeep.com.
1. Our role
- Hosts: we are the data controller for your account, payment and usage data.
- Guests: the host decides whom to invite and what to collect, so the host is the controller of guest data and we process it on their behalf, only to run their event. We still honour guest requests directly (see section 7).
2. What we collect
| Who | Data | Where it comes from |
|---|---|---|
| Hosts | Name, email and/or mobile number, sign-in provider, language, country (for currency) | You, or Google/Apple if you sign in with them |
| Hosts | Event content: names, dates, venues, photos, music, wording | You and your co-hosts |
| Hosts | Purchases: plan, amount, currency, receipt reference (never card numbers) | Dodo Payments |
| Guests | Household name, contact person, phone or email, city, side, tags, which functions you are invited to, notes | The host |
| Guests | RSVPs, headcount, meal choices, answers to the host’s questions, blessings | You |
| Guests | Photos and videos you upload, and the name you add to them | You |
| Everyone | Invite opens (date, device type, country from IP), check-ins at the venue | Our servers and the host’s check-in staff |
3. How and why we use it
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Showing invitations, collecting RSVPs, entry passes, check-in, albums | Contract with the host; for guests, the host’s legitimate interest in organising their event |
| Sign-in codes by SMS or email, account security, fraud and abuse prevention | Contract and legitimate interests |
| Payments, receipts, tax and accounting records | Contract and legal obligation |
| Showing hosts whether invites were opened (first-party, aggregate) | Legitimate interests |
| Service emails (receipts, security, changes to terms) | Contract and legal obligation |
We do not sell or rent personal data, we do not show ads, and we do not use guest data for marketing. We do not use your content to train AI models.
4. Who can see it
- The host and co-hosts see their guest list, RSVPs, blessings and album. Check-in helpers see only names and headcounts needed at the door.
- Each guest sees only their own household’s invitation and RSVPs. Guests never see other guests’ contact details. Approved blessings and album photos are visible to the guests of that event.
- Our service providers listed on the sub-processors page, under contracts that limit their use of the data.
- Our staff, only when needed for support, safety or legal reasons. Staff changes to events and plans are logged.
- Authorities, when the law requires it. We push back on requests that are not legally valid.
5. Links, search engines and security
Each household’s link contains a long random code, so it cannot be guessed. Invitation and album pages are marked noindex, kept out of our sitemap and are not listed anywhere public. Hosts can add a passcode and can reset a household’s link at any time.
Data is encrypted in transit (HTTPS) and at rest. Database access is restricted per event by row-level security, and guest pages can only call narrow functions that return that one household’s data. Photos are re-encoded on your device before upload, which strips location (GPS) data.
6. How long we keep it
- Events stay while active and for the album period of the plan, then are archived (guests can no longer open them).
- Hosts can export or delete guests and photos at any time. A deleted event disappears at once and is permanently erased 7 days later.
- Deleting an account removes its events and guest data after a 14-day grace period.
- Dodo Payments, as merchant of record, keeps payment and tax records for as long as the law requires.
- Backups roll off within 7 days of deletion.
7. Guests: remove my details
Every personal invitation has a “Remove my details” link at the bottom of the page. It immediately deletes your household’s contact details, RSVPs and blessings for that event, hides any photos you uploaded and queues them for deletion, and tells the host that you removed your details. Your link then stops working.
If you received a general invitation link, or want details removed from several events, email privacy@invitekeep.com with the event link and we will pass the request to the host and complete it within 30 days.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict processing, to withdraw consent, and to complain to a regulator. This includes the GDPR (EU), UK GDPR, India’s Digital Personal Data Protection Act 2023, the UAE PDPL, Canada’s PIPEDA, Australia’s Privacy Act and the CCPA/CPRA (California).
Hosts can do most of this from Account settings and the event’s Settings page (export CSV, delete event, delete account). Anyone can email privacy@invitekeep.com; we reply within 30 days and may need to confirm your identity. California residents: we do not sell or share personal information for cross-context behavioural advertising.
9. International transfers
Our main database is in Mumbai, India (chosen for speed in India and the Gulf). Some providers process data in other countries, such as the United States. Where data from the EU, UK or other regions with transfer rules leaves those regions, we rely on the providers’ standard contractual clauses or equivalent safeguards.
10. Children
Hosts must be 18 or over. Guest lists may include children as part of a household; hosts should add only the details needed for the invitation. We do not knowingly collect data directly from children under 13 (16 in the EU).
11. Cookies
We use only strictly necessary first-party cookies and no third-party tracking. Details are in our cookie policy.
12. Contact and grievance officer
Privacy contact: privacy@invitekeep.com, [Legal entity name], [registered address].
Grievance Officer (India, DPDP Act and IT Rules): [name], privacy@invitekeep.com. EU/UK representative, if required: [representative details].
We will post changes to this policy here and email hosts about significant changes.