1. Data we collect
- name, email, phone number or Telegram contact;
- order and event details, copy, locations and design preferences;
- photos and file links supplied for the invitation;
- invoice number, payment status, amount and time (we do not receive full card details);
- security logs, device information and anonymous website analytics.
2. Why we use it
To prepare and fulfil an order, communicate with the customer, process payments and refunds, issue fiscal records, prevent abuse, meet legal obligations and improve the service. Marketing messages require separate consent.
3. Legal grounds
Performance of a contract, steps requested before a contract, compliance with legal obligations, legitimate interests in service security, and consent where required.
4. Service providers
Necessary data may be processed by the bank holding the provider’s account, Vercel or another host, Telegram for internal order notifications, file storage selected by the customer, an email provider, and public authorities where required by law. We do not sell personal data.
5. Guest RSVP data
RSVP forms may collect a guest’s name, attendance, party size, meal choice and comments. The customer determines the purpose and must inform guests. Invito processes this data only to operate the form and pass responses to the customer. Where Invito builds and hosts the page, replies are stored in a Google spreadsheet in Invito’s account — a separate spreadsheet per order, shared with the customer as a viewer. Where the customer hosts the page themselves, replies go straight to them and Invito never sees them.
6. Newsletter and subscription
If you leave your email in a subscription form — the window on the home page or the one in the footer — we store the address itself, the language of the page and which form it came from. The basis is your consent. We use the address only for notes about new designs and occasions, and for the message confirming that your package price is held for two weeks. We send no third-party advertising and we pass addresses to nobody. To unsubscribe, reply to any of our emails or write to hello@invitodigital.store — the address is then deleted. With no order placed, we keep the address for no longer than 2 years from the day you subscribed.
7. Retention and security
Order records are kept for service, accounting, tax and legal requirements. Project files are deleted or archived after support ends unless agreed otherwise. Guest replies are kept for no longer than 6 months after the event date, after which the spreadsheet is deleted. We will delete them sooner, or hand over an export, at the customer’s request. Access is restricted, connections are encrypted, and secret keys are kept in server-side settings.
8. Your rights
You may request access, correction, deletion, restriction or withdrawal of consent by emailing hello@invitodigital.store. Some records must be retained where required by law.
9. Local storage and analytics
The site may store an invoice identifier locally to confirm payment after returning from the provider and uses cookieless Vercel analytics. If optional advertising cookies are added, this policy and the consent mechanism will be updated.