Privacy Policy

Who is responsible for your data

Invitely is currently operated by Hilal Gerçek in Finland. For questions about this notice or your personal data, contact privacy@invitely.com.

Who this notice covers

This notice applies to Invitely account holders and to guests who interact with an invitation or submit an RSVP.

For account and platform data, Hilal Gerçek is the data controller. For guest information collected for a specific event, the event organiser decides why that information is collected and is the controller. Invitely processes that guest information on the organiser's instructions to provide the service.

Some guest information may be entered or uploaded by the organiser before a guest opens the invitation — for example when importing a guest list. In those cases, the organiser is responsible for having a lawful basis to provide that information to Invitely.

What we store

• Account data: name, email address, profile image (when using Google sign-in), and authentication records.
• Invitations: subdomain, event title, date, published content, and settings you configure.
• Guest RSVP data: guest name, email, phone number, optional dietary notes, attendance choices, additional guests, messages, and custom RSVP answers.
• Operational records: transactional email delivery logs and limited security or abuse-prevention records.

Dietary notes: this field is optional. Information entered there may reveal health or religious information. Organisers should only collect what they need, and guests should only provide what they choose to share.

Legal bases

We process personal data on the following bases, depending on the activity:

• Contract / steps at your request: creating and managing your account, invitations, RSVPs, and transactional emails needed to run the service you ask us to provide.
• Legitimate interests: securing the service, preventing abuse, maintaining limited operational logs, and improving reliability — balanced against your rights.
• Legal obligation: where we must retain or disclose information to comply with applicable law.
• Consent: only where required, for example if we later introduce non-essential cookies or marketing communications. We do not send marketing emails today.

Organisers are responsible for identifying and documenting the lawful basis for collecting guest information for their events.

Recipients and international transfers

We use service providers to host, store, authenticate, and deliver the service. A current list is on our Service providers & subprocessors page.

Some providers process data outside the EU/EEA, mainly in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or provider DPAs.

Retention

During the beta, account and event data is kept while your beta account remains active. You may request deletion at any time.

If your beta account is closed or the beta ends, we aim to delete production account and event data within 30 days, unless we must keep specific information longer to comply with law or resolve a dispute. Backup copies may persist for a limited additional period before being overwritten.

Your rights

If GDPR applies to you, you may have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion in certain circumstances;
• request restriction of processing;
• data portability, where applicable;
• object to processing based on legitimate interests;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a supervisory authority.

In Finland, the relevant authority is the Office of the Data Protection Ombudsman (Finland). To exercise your rights with Invitely, email privacy@invitely.com from the address tied to your account or include enough information for us to identify the relevant invitation or RSVP.

Guests should usually contact the event organiser first for event-specific guest data. We will help where we act as processor on the organiser's instructions.

Cookies

We only use strictly necessary cookies today. See our Cookies page for names, purposes, and durations.

Contact

Privacy questions or data requests: privacy@invitely.com