Wedding invitation websites with RSVP

1. Who we are

eInvite (einvitecards.com) is a service for creating invitation websites for weddings, birthdays and other events. It is run by Abdul Haseeb, an individual based in Pakistan, who is responsible for your information (the “data controller”). In this policy “we” and “us” mean eInvite.

Questions or requests about your privacy: hello@einvitecards.com or WhatsApp +92 311 1438809.

2. What we collect

If you make an invitation before signing in: you don’t need an account to start. We give your browser a temporary anonymous session so your draft is saved while you work. When you sign in with Google, that session and its draft become your account. Anonymous drafts that are never signed in are deleted after 30 days.

If you create an account (a “host”):

Account details: your name and email address. If you sign up with a password, it is stored only as a secure hash by our authentication provider; we never see it.
From Google, if you choose “Continue with Google”: your name, email address and profile picture, and a Google account ID. See section 4.
Your invitations: everything you add, such as names, dates, times, venues and addresses, schedules, messages, photos, music or audio you upload, guest list names, groups and families, and settings.

If you reply to an invitation (a “guest”): you don’t need an account. We store what you enter in the reply form: your name, whether you are coming, how many people, meal choices, dietary notes, a message to the host, and which events you’re replying to. If the host uses personal guest links, we also record which group or family the reply belongs to.

Automatically, from everyone:

Your review, if you leave one: your star rating, your words, the name you choose to show and which invitation design you used. Once we approve it, we may show your rating, your words and the name you chose on our website, like a public review; we never show your email or your invitation. Edit it any time on the Publish page; deleting your account deletes it.
Invitation opens: we count how many times each published invitation is opened, so we know when a free link reaches its limit of 50 opens.
Country: our hosting provider tells us which country a visit comes from, based on the IP address, so we can show prices in the right currency. We don’t store it.
Technical logs: our hosting and database providers keep short-lived server logs (such as IP address, browser type, the page requested and the time) for security and to fix problems.

If you use the free barat card maker: what you type into it (names, date, times, hall and area), the design, language and side you pick, whether you downloaded the card, and your device type and approximate city. You don’t need an account.

If you give us your WhatsApp number: the number you type, or the fact that you tapped our WhatsApp button, which invitation it is for, and whether you ticked the box for news about new designs. We use it to send you your invitation link, to remind you before a free link reaches its limit and to help you. We send news about new designs only if you ticked that box. Giving it is optional; ask us any time to delete it.

If you join our email list: the email address you enter, where on the site you signed up, and the date. You don’t need an account.

When you pay by card: you enter your card on the checkout of Creem, our payment provider and merchant of record; we never see or store your card number. Creem tells us your account, the plan, the amount, your email and the order number, so we can unlock Unlimited on your account.

When you pay by bank transfer: the payment screenshot you send us (which can show your name, bank or wallet, account number ending, amount and date), the plan, the amount and the date. If you contact us on WhatsApp, we also see your phone number, WhatsApp name and the messages you send.

Ads and analytics tags run only on our own website pages, never on guest invitations (see Cookies and storage). We never see or store your card number or banking password.

3. How we use it

To run your account, sign you in and keep it secure.
To build, save and publish your invitation, and show it to the guests you share the link with.
To send guests’ replies to the host who invited them, and show the host their guest list.
To show prices in your currency and remember your currency choice.
If you joined our email list, to email you about new templates and features. Every email will have a way to unsubscribe, or you can ask us to remove you at any time.
To count how many times each invitation is opened, and to confirm your payment, unlock Unlimited, keep a record of it and handle refunds.
To answer your questions, prevent abuse, and fix and improve the service.
To meet legal obligations.

4. Google sign-in and Google user data

When you choose “Continue with Google”, Google shares only your basic profile with us: your name, email address and profile picture (the “openid”, “email” and “profile” permissions). We don’t ask for access to your Gmail, contacts, Drive, calendar or any other Google data.

How we use it: only to create your eInvite account, sign you in, and show your name in your dashboard.
How we store it: with your account in our authentication database (Supabase), protected by encryption in transit and access controls.
Sharing: we don’t sell it, share it with third parties, use it for advertising, or use it to train artificial intelligence or machine-learning models. The only exceptions are our service providers that run the sign-in for us (section 5) and what the law requires.
Deleting it: deleting your account removes it. You can also remove eInvite’s access at any time at myaccount.google.com/connections.

eInvite’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

5. Who can see your information

People with the link: a published invitation can be opened by anyone who has its link, so share it only with people you want to invite. With personal guest links, each guest sees only the events meant for them.
The host: sees the replies to their own invitations. Guests don’t see each other’s replies.
Our service providers, who process data only on our instructions: Supabase (database and sign-in, in Mumbai, India), Cloudflare (storage for photos, music and payment screenshots, and our domain’s network), Vercel (website hosting, in Mumbai, India, with a global network that delivers pages), PostHog (website analytics, stored in the EU), Google (sign-in, if you use it) and Creem (card payments, Estonia; it acts as the seller of your plan and keeps payment data under its own privacy policy). For our own ads, Meta and Google measure visits to our website pages (see Cookies and storage). If you message us, WhatsApp (Meta) carries the conversation under its own privacy policy.
Embedded services: invitations can show a Google Maps map of the venue, and a YouTube or Spotify player if the host adds a music link. When the invitation loads these, the service receives the visitor’s IP address and may set its own cookies, under its own privacy policy. When a host searches for a venue address, the search text and the host’s approximate area (city level, from their internet connection, so nearby places come first) go to Photon by Komoot, an open address-search service. When a host pastes a short Google Maps link, our server opens it at Google to read the location. When a host taps “I’m at the venue”, their device location is saved as the venue’s map pin and sent to Photon to find the city.
If the law requires it, or to protect people’s safety or our rights.

We never sell personal information.

6. Cookies and storage on your device

Sign-in cookies keep you logged in. They are necessary for the service to work.
A device cookie (“einvite_device”, a random code, two years) lets you make an invitation without an account and keeps your drafts together on this browser. It is necessary for the service to work.
A currency cookie (“region”) remembers the country you chose for prices, for one year.
Your browser’s local storage remembers a guest’s own reply (so they can change it later) and their language choice on the invitation. This stays on the guest’s device.
Google (sign-in and maps), YouTube and Spotify may set their own cookies when they load. See their privacy policies.
Ads and measurement on our own pages: our website pages (not guest invitations) may load the Meta Pixel and Google Tag Manager. They tell Meta and Google which pages were visited and when someone signs up or contacts us to pay, so we can measure and improve our ads on Facebook, Instagram and Google. They use their own cookies and receive your IP address and browser details. We don’t send them your email, your Google profile or anything from your invitations.
Analytics on our own pages: we use PostHog (data stored in the EU) to see which pages are visited and where people get stuck, so we can improve the site. It records page views, clicks and short screen recordings of how our pages are used. Everything you type is blanked out in the recordings. PostHog sets its own cookie (“ph_…”) and receives your IP address and browser details through our own domain. It is covered by the same choice as the ad tags below.
Your choice: visitors in the EU, the UK and Switzerland are asked first, and these tags and PostHog load only after they accept. Everyone else can turn them off at any time with “Cookie settings” at the bottom of our pages. A “consent” cookie remembers the choice for one year. Guest invitations never load them.

7. How long we keep it

Accounts and invitations: for as long as you keep your account. An invitation stops being public 7 days after its last event date, but stays in your dashboard as a draft until you delete it.
Guest replies: for as long as the host keeps the invitation or their account.
Email list: until you unsubscribe or ask us to remove you.
Payment records (plan, amount, date, card order number or screenshot): for as long as you have your account, and afterwards only as long as we need them for accounting, refunds or the law. Screenshots are stored privately and only the owner of eInvite can open them.
When you delete your account, we delete your profile, invitations, guest replies, photos and audio straight away. Copies may stay in our providers’ backups and logs for a short time before they are overwritten.

8. Your choices and rights

You can see and change your invitations in your dashboard at any time, and delete your account under Account, which deletes everything in it.

You can also ask us to give you a copy of your information, correct it, delete it, or stop using it for a purpose. Email hello@einvitecards.com and we’ll reply within 30 days. Depending on where you live (for example in the EU or UK), you may have extra rights under local law, including the right to complain to your data protection authority.

Guests: to change or remove a reply, you can edit it from the same invitation link on the same device, ask the host, or email us with the invitation link and your name.

9. A note for hosts

When you add guests’ names or other people’s photos to an invitation, you are responsible for having their permission to share them with the people you invite. Please don’t upload sensitive information, such as ID numbers, health details or financial details.

10. Children

eInvite accounts are for adults (18 or older). We don’t knowingly collect information from children under 13. If you think a child has given us information, email hello@einvitecards.com and we’ll delete it.

11. Security

All connections to einvitecards.com are encrypted (HTTPS). Access to data is limited by account, so hosts can only reach their own invitations and replies, and passwords are stored as hashes. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

12. Changes to this policy

If we change this policy, we’ll update the date at the top. For important changes, we’ll tell hosts by email or in the dashboard before they take effect.

13. Contact

Abdul Haseeb, eInvite, Pakistan. Email: hello@einvitecards.com. WhatsApp: +92 311 1438809.