Privacy
The short version
An invitation holds a party: a date, a place, and the people who said whether they are coming. We keep that for the host who is throwing it, for as long as it is useful to them, and then we delete it. Nothing here is sold, rented, or used to advertise anything, and there is no tracking of any kind on the invitation a guest sees.
- A guest's contact details, food notes and free text are deleted 30 days after the party.
- The whole invitation, including who came, is deleted 365 days after the party.
- A guest can delete their own reply at any time, from the invitation itself.
- There are no analytics, no advertising and no third-party trackers on a guest page.
Who is responsible
Juliana Vieira, DaydreamsArtDigitalTieckstrasse 30
10115 Berlin
Germany
hello@getsmartinvite.com
We are the controller for the site itself: the shop order that turns into an invitation, the emails we send you, and the security measures that keep the whole thing standing.
For what a host writes on their own invitation and for the replies it collects, the host decides what is asked and who sees it, and we hold it for them. Someone inviting friends to their own wedding is doing something personal, and the law generally leaves purely private invitations to the person sending them. A host using Smart Invite for anything professional is the controller of those replies, we are their processor, and the data processing terms in our Terms apply. Either way, the duties in this notice are ours and we do not step out of them.
If you were invited to a party
You are here because someone sent you a link. You have no account with us, you are not asked to make one, and we know nothing about you beyond what you type into the reply form.
What we hold, and why
| What | Why | Legal basis |
|---|---|---|
| Your name, whether you are coming, how many people you are bringing, and their names and ages if the host asked | So the host knows who is coming and can count chairs | Article 6(1)(f): the host's legitimate interest in running their own party, which is also why you were sent the link |
| An email address or a phone number | Only when the host turned that question on, so they can reach you if the date or the place changes, and so we can email you the link to your own reply | Article 6(1)(f). You decide whether to fill it in |
| A note to the host, and answers to any question the host added | Whatever you chose to say | Article 6(1)(f) |
| What you cannot eat, and any note about it | So the kitchen knows. This can reveal an allergy, a condition or a religious practice, so it is stored only if you tick the box next to it | Article 9(2)(a): your explicit consent, which you can withdraw at any time by clearing the note or deleting your reply |
| A one-way hash of your IP address and browser string | To stop one machine filling an invitation with a hundred invented guests. It cannot be turned back into your address | Article 6(1)(f): keeping the service standing |
One cookie, named si_r_ and the invitation's address | So that coming back to the invitation shows you the answer you already gave, and lets you change it | Strictly necessary for the service you asked for, so no consent is required under section 25(2) TDDDG. It carries nothing but a signed reference to your own reply |
What we do not do
No analytics script, no advertising pixel, no font fetched from someone else's server, no profile of you, and no automated decision that has any effect on you. Your reply goes to the host of that one party. It is not shown to the host of any other party, it is not used to suggest anything to anyone, and it is never sold.
When an invitation is open to anyone holding the link, the reply form is protected by Cloudflare Turnstile, which checks that a browser is a browser and not a script. Cloudflare receives that request and may set a short-lived cookie of its own so a browser that has already passed is not asked twice. It is used for that and nothing else, and it does not follow you around the web.
What you can do about it
- Delete it. Open the invitation and use "Delete my reply". Your name, your answer and everything you wrote go at once, including any earlier version of the reply. The host is left with a count saying a guest withdrew, and nothing saying which one.
- Change it. If the host allowed edits, the same page lets you correct anything. The version you replaced is deleted after 30 days.
- Ask us. Write to hello@getsmartinvite.com and we will do it for you. We will ask for the address of the invitation and the name you replied under, because a reply with no account attached cannot be found any other way.
If you bought an invitation
Smart Invite is sold on Etsy. Etsy is the shop, and their own privacy notice covers everything that happens there, including your payment, which we never see.
- Your order number. We fetch the order from Etsy so a receipt can be turned into a working invitation once. Nothing about you comes back with it: not your name, and not the address you bought with. The order table holds what was sold and when, and there is nothing in it that could be read as a mailing list.
- Your email address. Kept once you activate, because the link that opens your invitation is emailed to you and there is no password to fall back on. We use it to send that link, to send it again when you ask, and to tell you about something that affects your invitation. We do not send marketing.
- Everything you put on the invitation. The date, the place, the photographs, the wording, the questions you ask your guests. That is the product. It is yours, and we do not read it except when you ask us for help with it.
- Your planner, if you bought one. Your checklist, your budget figures and the names of the suppliers you write into it. It is your own working note: no guest ever sees it, and it goes nowhere else. A supplier name you type into a budget line stays inside your invitation and goes when your invitation goes.
- That you accepted these terms, and which version. Article 5(2) asks us to be able to show it, so a date and a version number sit on your record.
The legal basis for all of that is Article 6(1)(b): it is what you bought. The record of your acceptance rests on Article 6(1)(c), because we are required to be able to produce it.
Who else touches it
As few as it is possible to run this on. Each one processes data only on our instructions, under a contract that says so.
| Who | What for | Where |
|---|---|---|
| Supabase | The database, and the photographs on an invitation | European Union |
| Vercel | Running the site and serving the pages | European Union, with company support from the United States under the EU standard contractual clauses |
| Cloudflare | The Turnstile check on the reply form | The nearest edge location, under the standard contractual clauses |
| Resend | Sending the activation and recovery emails to a buyer, and a guest the link to their own reply | United States, under the standard contractual clauses |
| Etsy | The shop and the payment. Etsy is a controller in its own right, not our processor | See Etsy's own privacy notice |
Nobody else. We do not hand data to anyone for money, and we would hand it to an authority only against a legal order that actually names it.
How long any of it stays
These are not intentions. They are what a job on this site does every night, whether anyone remembers it or not, and the numbers below are read straight from the schedule that job follows.
| What | Deleted |
|---|---|
| A guest's contact details, food notes, free text and question answers | 30 days after the party |
| The invitation itself, its photographs, and the list of who came | 365 days after the party |
| Your planning checklist and your budget, including any supplier you named in it | With the invitation, 365 days after the party |
| An earlier version of a reply that a guest changed | 30 days after it was replaced |
| The hashes of an IP address and browser string | 30 days after the reply |
| The record that an email was sent | 90 days |
| A draft that was never published and never touched again | 365 days after it was last edited |
| A buyer's email address | When the last of their invitations goes |
| The order record behind a purchase | Kept as long as tax and commercial law require it of a trader in Germany, which is up to ten years, and used for nothing else in the meantime |
Your rights
Under Articles 15 to 21 you may ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop or restrict what we do with it, ask for it in a portable form, and object to anything we do on the basis of a legitimate interest. Where something rests on your consent, such as a note about food, you can withdraw that consent at any time, and withdrawing it does not make what happened before it unlawful.
Write to hello@getsmartinvite.com. We answer within a month. There is no charge, and we will not ask you to create an account in order to be forgotten.
If we get it wrong you can complain to a data protection authority, in the country you live in, or work in, or where the problem happened. The one that supervises us: Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Keeping it safe
Everything travels over TLS. A host's link and a guest's reply are both signed, so a guessed address opens nothing. Nobody's browser is ever given a database key. Access to the database is limited to the people who run the service, and secrets are held outside the code. None of that makes a breach impossible; if one happens and it puts you at risk, we will tell you and the authority, as Articles 33 and 34 require.
Children
Smart Invite is sold to adults. A host may well list a child as a guest coming with them, which is no more than a name and an age band on a family's own invitation, and it is deleted on the same schedule as everything else. We do not knowingly let anyone under 16 buy or run an invitation.
When this changes
If we change something that matters, the date at the top changes with it, and anyone with an invitation open is asked to look at it again before carrying on. Old versions are kept so it can be seen what was in force when.
The term 'Etsy' is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.