Privacy Policy

Account data: your name and email, and a securely hashed password if you register with email. If you use Google, we receive your name, email, and profile photo.

Signup metadata: the date you joined and approximate location (country/city) and IP address, derived from your request, for security and analytics.

Invitation content: the details you enter (names, dates, venue, etc.). This is encrypted at rest.

Guest RSVPs: names and contact numbers your guests submit to your published invitations. These are encrypted and visible only to you (and us as processor).

Payment data: processed by Paddle.com, our payment provider and Merchant of Record. Paddle collects and handles your payment details and billing directly; we never see or store your full card details — only a payment status and reference. See Paddle's privacy notice.

Usage & device data: pages visited, referrer, device/browser, and similar analytics, collected via cookies.

To create and secure your account; provide the builder and host your invitations; collect and show RSVPs to you; process payments; communicate with you (e.g. verification, password resets); prevent fraud and abuse; comply with law; and — where you consent — measure and improve our marketing.

Essential cookies keep you signed in and the site working (always on). Analytics cookies (e.g. Google Analytics) help us understand traffic and demographics. Advertising cookies (e.g. Google/Meta pixels) help us measure and show relevant ads.

Analytics and advertising cookies load only after you accept them in our cookie banner. You can change your choice at any time by clearing your browser's site data.

We do not sell your personal data. We share limited data with service providers who process it on our behalf: Neon (database), Vercel (hosting), Google (sign-in & analytics), Resend (email), Paddle(payments & Merchant of Record), and advertising platforms where you consent. We may also disclose information if required by law.

We keep your data while your account is active. When you delete your account, your profile, invitations, and RSVPs are removed. Some records (e.g. payment receipts) may be retained where required by law.

Sensitive fields are encrypted at the application layer (AES-256) on top of encrypted-at-rest storage, and passwords are hashed. No system is perfectly secure, but we take reasonable measures to protect your data.

Our providers may process data in other countries. Where required, we rely on appropriate safeguards for such transfers.

You can access, export, correct, or delete your data at any time from your account settings (or by contacting us), and withdraw cookie consent. Depending on your location, you may have additional rights under laws such as the GDPR.

The Cordial Invite is not intended for anyone under 16, and we do not knowingly collect data from children.

We may update this policy; material changes will be posted here. For any privacy questions or to exercise your rights, email us at hello@thecordialinvite.com.