Last updated: 2026
When you sign in with Google, we store your email address to identify your account and enforce fair usage limits. When you create an invitation, we store the invitation content (title, date, location, theme, message) along with your email and an anonymous device identifier. Guests who view an invitation are assigned an anonymous session — no personal data is collected from them unless they submit an RSVP, in which case we store their name and response.
Your email is used solely to associate invitations with your account and to limit creation to two free invitations per day. We do not sell, share, or use your data for advertising. RSVP responses are stored so you can see who responded to your invitation.
Invity is built on Supabase (database and authentication) and uses Google OAuth for sign-in. Your sign-in is handled directly by Google — we never see your Google password. Data is stored on Supabase infrastructure. If you purchase Invity Pro, payment is processed by Paddle.com, our merchant of record — Paddle collects your payment details and billing information directly, and we never see your card number. We use PostHog (EU-hosted) for product analytics on the pages where invitations are created, to understand which designs and features get used; if you are signed in, your email is associated with that usage. Please refer to their respective privacy policies for how they handle data.
Invitation links expire automatically — after 5 hours on the free tier, or 30 days for Pro subscribers. Your account data (email, creation history, and subscription status if you're a Pro subscriber) remains stored until you delete your account. You can delete your account at any time from the account menu — this removes your invitations from our database, cancels any active subscription, and signs you out.
We use browser local storage to store an anonymous device identifier used for rate-limiting purposes. On the pages where invitations are created, our analytics provider (PostHog) also sets cookies to recognise a returning visit. No advertising cookies are used and we do not sell or share your data with advertisers.
Opening an invitation is not tracked. If someone sends you an Invity link, viewing it and responding sets no analytics cookie and creates no analytics profile — you do not need an account, and we do not measure you.
For any privacy-related questions, contact us at cardsinvity@gmail.com.