Privacy Policy

Please read our privacy policy carefully.

Privacy Policy for InviteFlare.com

Last Updated: 08-AUG-2026

InviteFlare.com ("InviteFlare," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our websites, use our apps or APIs, and otherwise interact with our services (collectively, the "Services"). By using the Services, you agree to this Policy.

Note: This Policy is for general information and does not constitute legal advice. Depending on your jurisdiction and product configuration, some sections may not apply.

1. Who We Are & Roles

For most processing activities, InviteFlare acts as the data controller (or equivalent). When you upload guest/recipient contact details to send invitations or RSVP emails, you are the controller of that data and InviteFlare processes it as your processor/service provider in accordance with your instructions and this Policy.

2. Information We Collect

We collect information in the following categories:

  • Account & Profile: name, email, password (hashed), avatar, organization/team details (if applicable).
  • Contact & Communications: email content, support requests, feedback, and message metadata.
  • Messaging & Share Data: share links, WhatsApp share URLs or deep links we generate, selected share method, and related interaction metadata such as timestamps or status needed to operate sharing features.
  • Payment & Billing: transaction IDs, billing address, last four digits of card/payment method. We do not store full card numbers.
  • Guest/Recipient Data (on your behalf): names and email addresses of invitees, RSVP status, message interactions, and delivery/open events.
  • Content You Provide: text, images, videos, templates, and settings used to create invitations or eCards.
  • Device & Usage: IP address, device identifiers, browser type, pages viewed, referring/exit pages, timestamps, language, approximate location derived from IP.
  • Cookies & Similar Technologies: cookie IDs, session tokens, analytics and advertising identifiers (see Section 6).

3. Sources of Information

  • Directly from you when you create an account, make a purchase, contact support, or use the editor.
  • Automatically via cookies, logs, and analytics when you use the Services.
  • From third parties such as payment processors (for payment status), authentication providers (if you use social login), messaging platforms you choose to use for sharing (such as WhatsApp), or partners you authorize.

4. How We Use Information

  • Provide the Services: create and manage accounts, render templates, send invitations/RSVP emails, and operate features.
  • Enable sharing: create shareable invitation or greeting-card links, generate platform-specific share URLs, and help you open third-party messaging apps or sites you choose to use for distribution.
  • Process transactions: handle subscriptions and one‑time purchases, detect and prevent fraud.
  • Customer support & communications: send service notices, respond to inquiries, and provide updates. You can opt out of marketing emails at any time.
  • Personalize & improve: remember preferences, measure performance, run A/B tests, and develop new features.
  • Security & integrity: monitor, troubleshoot, and protect against abuse, spam, or violations of our terms.
  • Legal compliance: keep records required by law and respond to lawful requests.

5. AI-Assisted Features

Some features (e.g., text/image generation or enhancement) may send your prompts and content to carefully selected AI service providers for processing. Where available, we configure providers to not use your content to train their models. Avoid including sensitive personal information in AI prompts. Outputs may be machine‑generated and should be reviewed before use.

6. Cookies & Tracking Technologies

We use cookies, local storage, pixels, scripts, and similar technologies to:

  • Essential: authentication, security, and core site functionality.
  • Functional: remember preferences and improve usability.
  • Analytics: understand usage to improve the Services using tools such as Google Analytics 4 and Microsoft Clarity.
  • Advertising/Marketing: where enabled, measure campaigns and show relevant content.

Our cookie behavior may vary by region. For visitors in the United States, analytics technologies may load by default with an opt‑out choice. For Canada, Quebec, the EEA, the UK, and other jurisdictions that require prior consent, non‑essential analytics and similar technologies are disabled until you choose to allow them. If your browser sends a Global Privacy Control signal, we treat it as an opt‑out from non‑essential analytics/marketing technologies.

You can use the cookie banner, the Cookie Preferences link in our footer, our Cookie Policy, or your browser controls to limit cookies. Disabling some cookies may affect site functionality.

7. Legal Bases (EEA/UK users)

Where the GDPR/UK GDPR applies, we process personal data based on:

  • Contract: to provide the Services you requested.
  • Legitimate interests: to secure, improve, and market our Services (balanced against your rights).
  • Consent: for certain cookies/marketing and optional features. You may withdraw consent at any time.
  • Legal obligations: to comply with tax, accounting, and regulatory requirements.

8. How We Share Information

We do not sell your personal information. We share it only with:

  • Service providers/Processors: e.g., cloud hosting and storage (such as AWS), email delivery (such as Amazon SES), analytics, AI providers, and payments (such as Paddle). They may access data only to perform services for us and are bound by confidentiality obligations.
  • Partners you authorize: if you connect third‑party apps or integrations.
  • Third-party messaging platforms you choose to use: if you click a WhatsApp or similar sharing feature, relevant link data or prefilled message content may be passed to that platform at your direction. Your use of that platform is governed by its own terms and privacy policy.
  • Legal & safety: to comply with law, enforce our terms, or protect rights, property, or safety.
  • Business transfers: as part of a merger, financing, acquisition, or sale of assets, subject to safeguards.

9. Payments

Payments are processed by trusted providers (e.g., Paddle). We receive limited billing details and transaction confirmations. Full payment card data is handled by the payment processor and is not stored on InviteFlare servers.

9A. WhatsApp and Other Messaging Platforms

Our Services may let you share invitations or greeting cards through third‑party messaging platforms such as WhatsApp. In our current implementation, these features generally create a shareable link or open a deep link/web link to the messaging platform you selected. We may store limited metadata about the sharing feature you used (for example, selected share method, generated share links, and related timestamps) to operate the feature, troubleshoot issues, and measure product usage. We do not control how third‑party messaging platforms process data once you choose to use them.

10. International Data Transfers

We operate globally and may transfer, store, or process information in countries other than your own (including the United States). Where required, we implement appropriate safeguards, such as Standard Contractual Clauses for EEA/UK data, and ensure service providers provide adequate protection.

11. Security

We use administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and monitoring. No system is 100% secure; you are responsible for choosing a strong password and keeping it confidential.

12. Data Retention

We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce agreements. We do not promise permanent or lifetime storage. Examples:

  • Account and invitation data: generally kept while your account remains active and until you delete the relevant invitation, delete your account, or ask us to delete it, subject to the exceptions below.
  • Guest/recipient data (processed for you): retained according to your settings and instructions; you may delete it from your dashboard or request deletion.
  • Transactional records: retained for legal/accounting requirements.
  • Analytics logs: retained for a limited period and then aggregated or deleted.

Ending or allowing a paid subscription to expire does not, by itself, delete invitations already stored in your account. However, future editing, creation, export, and other features are governed by your current plan and entitlements.

We may suspend, remove, or delete content when reasonably necessary for security, fraud or abuse prevention, legal compliance, enforcement of our agreements, or the operation or discontinuation of the Services. Following deletion, limited copies may remain temporarily in backups, and we may retain billing, legal, security, and audit records where required or permitted by law. Download any content you need to preserve independently.

13. Your Rights & Choices

Your rights depend on your location and applicable law. Subject to verification and exceptions, you may:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Data portability where technically feasible.
  • Opt out of marketing communications and certain cookies.

To exercise rights, contact us at contact@inviteflare.com. We may need to verify your identity and jurisdiction.

14. Region-Specific Disclosures

Canada (PIPEDA & CASL): You have rights to access and correct your personal information. For commercial electronic messages we comply with Canada's Anti‑Spam Legislation (CASL). You can withdraw consent/unsubscribe using the links in our emails or by contacting us. For non‑essential analytics and similar technologies, we use a consent-first approach for Canadian visitors.

Quebec Law 25: For Quebec visitors, technologies that identify, locate, or profile a person are not activated by default unless they are necessary to provide the Services. You can choose to activate or decline non‑essential analytics through our cookie banner or Cookie Preferences link.

California (CPRA/CCPA): California residents can request access, deletion, correction, and to opt out of the "sale" or "sharing" of personal information as defined by law. We do not sell personal information for money. Where cookies or advertising technologies could be deemed a "sale" or "share," you may opt out via our cookie preferences, Global Privacy Control, or by contacting us.

EEA/UK (GDPR): You may lodge a complaint with your local supervisory authority. Our lawful bases are listed in Section 7, and non‑essential analytics/marketing technologies are blocked until consent where required.

15. Children’s Privacy

The Services are not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK without parental consent). If you believe a child provided us personal information, contact us and we will delete it.

16. Third‑Party Links

The Services may link to third‑party sites or services. Their privacy practices are governed by their own policies, which we do not control. Review their policies before providing personal information.

17. Your Responsibilities for Guest/Recipient Data

If you import or enter guest contact details to send invitations or reminders, you represent that you have a lawful basis to contact those individuals and will comply with applicable anti‑spam and privacy laws. You can delete recipient data from your dashboard or request deletion at any time.

18. Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry standard for DNT, we do not currently respond to DNT signals. You can use our cookie preferences and your browser settings to control tracking technologies.

19. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date reflects the most recent changes. If changes materially affect your rights, we will notify you via the Services or by email.

20. Contact Us

Questions, requests, or complaints:

Email: contact@inviteflare.com