Privacy Policy

1. What this covers

This describes what information Eventlycard collects when you create an account, build an invitation, or a guest RSVPs to one, and what we do with it. It applies to eventlycard.com and its subdomains.

2. Information we collect

From account holders:

• Email address and password (or, if you sign in with Google, your Google account's name/email/profile picture)
• Anything you add to an invitation: event details, names, photos, audio, custom borders
• Payment information when you upgrade an invitation, buy storage, or buy a template — this is handled entirely by Stripe; we receive confirmation that payment succeeded, not your card details
• If you connect Canva, an access token that lets us send images to your Canva account on your behalf — we don't see your other Canva designs or account details beyond what's needed for that connection
• Basic technical data any web server logs — IP address, browser type, pages visited

From guests (people who receive an invitation link):

• Whatever your RSVP form asks for — typically a name and attendance response
• If the invitation owner sends the link via SMS/WhatsApp, the phone number they entered, used only to deliver that message via Twilio

Guest information is collected on behalf of, and controlled by, the invitation owner — we store it and show it on their dashboard, but we don't use it for our own marketing or share it with anyone beyond what's needed to run the service.

3. How we use it

• To create and display your invitation to the people you share it with
• To process payments and keep your account's storage and access in sync with what you've paid for
• To send you account-related emails — password resets, sign-in links — never marketing emails you haven't asked for
• To send SMS/WhatsApp messages on your behalf, only when you use that feature and only to numbers you provide
• To keep the service secure and prevent abuse

4. Who we share it with

We don't sell your data. We share it only with the services that make the product work:

• Stripe — payment processing
• Twilio — SMS/WhatsApp delivery, only if you use that feature
• Canva — only if you explicitly connect your Canva account
• Google — only if you sign in with Google or use the venue map/autocomplete feature
• A cloud storage provider — hosts uploaded images and audio files
• Email delivery provider — sends account-related emails

Each of these processes data under its own privacy policy; we only send them what they need to perform their specific function.

5. Public and private invitations

A free invitation's link is accessible to anyone who has it — treat it like any other shareable link. A private (paid) invitation is password-protected; we don't include its details (names, date, venue, photo) in link previews or search results. Neither type is intentionally indexed by search engines.

6. Cookies

We use a session cookie to keep you signed in, this is strictly necessary for the service to function and doesn't require consent.

With your consent, we also use Google Maps (to show a venue's location on a published invitation, and to search for a venue while building one) and Microsoft Clarity (to record anonymized usage patterns, like clicks and scrolling, so we can understand how the site is actually used). Both are off by default and set their own third-party cookies only once you turn them on. We don't run advertising cookies or trackers.

You can change these choices at any time using the "Cookie settings" link in the footer of any page.

7. Data retention

Free invitations and their data may be deleted after they expire. If you delete your account, we delete your invitations, uploaded files, and associated RSVP data, except where we're required to keep records (for example, payment records for tax/accounting purposes) for longer.

8. Your rights

You can access, correct, or delete your account data at any time from your account settings, or by contacting us. Depending on where you live, you may have additional rights under laws like the GDPR (EU/UK) or CCPA (California) — including the right to request a copy of your data or ask us to delete it. Contact us to exercise any of these rights.

9. Children's privacy

Eventlycard isn't directed at children, and account holders must be 18 or older. We don't knowingly collect account data from anyone under 18. Guests filling in an RSVP aren't required to create an account, and RSVP forms should only be used to collect information appropriate for the event and its guests.

10. Changes to this policy

We may update this policy from time to time; the "last updated" date above reflects the most recent change. Continued use of the service after an update means you accept the revised policy.

11. Contact

Questions about this policy, or requests relating to your data, can be sent through our contact page.