Privacy Policy

1. Information we collect

• Account information: when you sign in we receive your email address; if you sign in with Google we also receive your name and profile picture from your Google account.
• Invitation content: the information you enter into an invitation, such as names, event time and location, invitation text, photos and background music.
• Guest wishes: the content guests submit through an invitation (for invitations that have this feature).
• Usage data: technical information such as device type, browser, invitation views and aggregated (non-identifying) statistics that help us improve the service.

2. How we use information

• To provide, operate and improve the create-and-share invitation service.
• To display your invitation to guests via the share link.
• To send emails about your account, payments and invitation status.
• To perform anonymous analysis to understand how the service is used and improve the experience.

3. Sharing data with third parties

We do not sell your personal data. We only share data with service providers necessary to run the service:

• Sign-in: Google (when you choose to sign in with Google), to authenticate your account.
• Payments: a payment-gateway partner to process transactions. We do not store your card or bank-account details.
• Hosting & infrastructure: server, image storage and email services used to run the product.
• Analytics: traffic-measurement tools (e.g. Google Analytics) in anonymized form.

We may also disclose data when required by law.

4. Cookies

We use cookies and similar technologies to keep you signed in, remember your choices and measure usage. You can disable cookies in your browser, but some features may not work correctly.

5. Data deletion and retention

We store invitation content and account information for as long as necessary to provide the service. Deletion works as follows:

• For unpaid invitations and accounts with no paid invitation, you can delete the invitation and account yourself at any time.
• For paid invitations and accounts with a paid invitation, you can email support@ivyinvi.com to request deletion of the invitation and account. After deletion, the account and paid invitation are disabled immediately and can be restored within 30 days by requesting it at support@ivyinvi.com. After 30 days, your account and invitations are permanently deleted and cannot be restored. These requests are handled within 3–5 business days from a valid email request.
• Transaction records are kept for 10 years as required by accounting law, regardless of account or invitation deletion.

6. Security

We apply reasonable technical measures to protect your data:

• Data is encrypted in transit over a secure connection (HTTPS/SSL).
• No passwords: you sign in with a Google account or a verification code sent by email. The code is single-use and short-lived, reducing password-leak risk.
• Administrative data access is limited to the service operator.
• We do not sell, share or rent your personal information to third parties, other than sharing with the providers necessary to run the service (listed in section 3).
• Data is backed up regularly in case of incidents.

7. Your rights

• View, edit or delete invitations you have created.
• Request access to, correction of, or deletion of your personal data.
• Withdraw consent and stop using the service at any time.

8. Changes to this policy

We may update this policy from time to time. A new version takes effect once posted on this page.

9. Governing law & contact

This policy is built to comply with Vietnamese law on the protection of personal data.

If you have any questions about privacy or wish to exercise your rights, please contact us by email at support@ivyinvi.com.