This is a translation. If there is any difference, the Spanish version prevails.
In a nutshell
- You don't need an account or email to create an invitation.
- We only keep the party details and your guests' replies.
- Replies are only visible to the host, through their private link.
- Everything is deleted automatically 14 days after the party.
- We don't store IP addresses, don't use cookies and never sell data.
Data controller
- Controller
- Alberto-Sider Simeonov Callejas
- Tax ID (NIF)
- 61725055R
- Address
- Carrer Gregal, 7, 46711 Guardamar de la Safor (Valencia), España
- Contact
- beto@sidcho.com
- Website
- invitito.com
For any privacy question, write to us at beto@sidcho.com.
What data we process
If you create an invitation (host)
What you type into the invitation: the name of the person being celebrated and, optionally, their age; the date, time, venue and address of the party; your message and who it is from. Also the design and language you choose. If you use the personal links of the Party plan, the names of the guests you add. We don't ask for your email, phone number or a password.
If you reply to an invitation (guest)
Whether you are coming, your name (or your child's), how many kids and adults are coming and, optionally, a note. If your note mentions allergies, that is health data: only write it if you want the host to know. By writing it, you give us your explicit consent to pass it on to the host.
Technical data
To prevent abuse (for example, someone sending hundreds of fake replies), we use your IP address at the moment of the request and only store an encrypted code (hash) that changes every day and cannot be turned back into your IP. Our hosting provider also logs technical request data (such as IP or browser) for a few days, for security and to fix errors.
If you write to us
Your email and whatever you tell us, so we can reply.
If you buy a paid plan
Payments are handled by Creem (Armitage Labs OÜ, registry code 16977866, Rotermanni 14, 10111 Tallinn, Estonia), which acts as reseller (merchant of record): it sells you the plan, takes the payment, applies taxes and sends you the invoice. Creem processes your payment data under its own privacy policy. We never see or store your card details: alongside the invitation we only keep that the payment was completed, the plan bought, the amount and the order number. Creem also tells us your name and email when it confirms the payment, but we don't store them.
Why we use it and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and show your invitation, and give you your private replies dashboard | Performance of the contract you accept when creating it (art. 6.1.b) |
| Collect each guest's reply and show it to the host | Legitimate interest of the host and guest in organising the party (art. 6.1.f) |
| Pass on to the host any allergies the guest chooses to mention | Explicit consent of the guest (art. 9.2.a) |
| Protect the service against spam and abuse | Legitimate interest in keeping the service safe (art. 6.1.f) |
| Answer your messages | Your consent when you write to us (art. 6.1.a) |
| Meet tax and accounting obligations for purchases | Legal obligation (art. 6.1.c) |
We don't use your data for advertising, don't build profiles and don't make automated decisions about you.
Who can see the data
- The invitation can be seen by anyone with its link. It doesn't appear in search engines, but only share it with your guests.
- Replies are only visible to the host through their private dashboard link. Keep it safe and don't share it.
- Our hosting provider, Cloudflare, Inc., which hosts the website and database as a data processor. The database is located in Western Europe. Cloudflare is a US company certified under the EU-US Data Privacy Framework, which ensures an adequate level of protection, in addition to standard contractual clauses.
- Cloudflare Turnstile, also by Cloudflare, Inc.: when you create or reply to an invitation, it invisibly checks that you are a person and not a program sending spam. To do so it analyses technical data from your browser and connection (such as your IP address); we don't use this data and it isn't used for advertising. Legal basis: our legitimate interest in protecting the service (art. 6.1.f).
- Creem (Armitage Labs OÜ, in Estonia, within the EU), the reseller that handles payments, only if you buy a paid plan.
- Authorities, only when the law requires it.
We never sell or rent personal data.
How long we keep it
- Invitations and replies: deleted automatically 14 days after the party date. To delete them sooner, write to us with your dashboard link.
- Encrypted IP code: kept with the invitation or reply and deleted with it.
- Provider technical logs: a few days.
- Emails: as long as needed to help you, and at most one year.
- Purchase records: as long as tax and commercial law requires (up to 6 years).
Children
Invitito is meant for adults. Many invitations are for children's parties and include a child's name and age: these are written by their parent or guardian, who is responsible for doing so. We recommend not adding surnames or anything that isn't needed. Children under 14 should not reply to invitations without their parents' permission.
Your rights
You can ask at any time to access, correct or delete your data, restrict or object to its use, or receive it in a portable format. If you gave us your consent, you can withdraw it whenever you want.
Write to us at beto@sidcho.com. Since we don't use accounts, please include the invitation link (and, if you are the host, your dashboard link) so we can find your data. We will reply within one month at the latest.
If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid) or to the authority in your country.
Security
The whole site runs over an encrypted connection (HTTPS). Your private dashboard link is stored encrypted, so not even we can see it. We collect only the data we really need and delete it soon.
Changes to this policy
If we change anything important, we will update this page and the date above. If a change affects how we use your data, we will explain it clearly before it applies.
Questions? Write to us at beto@sidcho.com