1. Overview

Invite Circle (“we”, “us”, “our”) is a wedding RSVP management platform operated by VK Indie Tools. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

By using Invite Circle — whether as an event host or as a guest submitting an RSVP — you agree to the practices described in this policy.

2. Who we are

Invite Circle is available at invitecircle.in. For any privacy-related questions, contact us at invitecircle@gmail.com.

3. Data we collect

From event hosts (registered users)

Account information — your name and email address, collected via Google OAuth when you sign in.
Event data — wedding names, function details (dates, venues, times), and any content you add to your events.
Uploaded files — invitation PDFs you upload are stored in our cloud storage.
Usage data — pages visited, actions taken, and timestamps, used to operate and improve the service.

From guests (RSVP submitters)

Name — as entered on the RSVP form.
Phone number — used as a unique identifier for your RSVP within the event. Not used for marketing.
RSVP responses — attendance per function, guest count, food preferences (vegetarian / non-vegetarian).
Optional notes — any well-wishes or messages you choose to leave when declining a function.

Guests do not create an account. No password or email address is collected from guests.

Automatically collected data

Log data — IP address, browser type, and referring URL, retained for up to 30 days for security and debugging.
Cookies — a single session cookie is set when a host signs in. No third-party advertising cookies are used.

4. How we use your data

Purpose	Data used	Legal basis
Providing the RSVP service	Guest name, phone, responses	Legitimate interests / contract
Host account and dashboard	Host email, event data	Contract
Sending WhatsApp messages	Guest name, phone, invite link	Legitimate interests (event coordination)
Service improvement and debugging	Usage and log data	Legitimate interests
Security and fraud prevention	Log data, IP address	Legitimate interests

We do not sell, rent, or trade your personal data to any third party. We do not use your data for advertising.

5. WhatsApp messaging

Event hosts may use Invite Circle to send WhatsApp messages to guests via the Meta WhatsApp Cloud API. When this feature is used:

Guest name and phone number are transmitted to Meta's servers to deliver the message.
Messages use pre-approved templates only — no free-form marketing messages.
Guests who do not wish to receive WhatsApp messages should ask the event host to remove them from the send list.
Meta's own privacy policy applies to the transmission and delivery of WhatsApp messages.

6. Data sharing

We share data only with the following third-party service providers, strictly to operate the platform:

Provider	Purpose	Data shared
Supabase	Database and authentication	All user and event data
Vercel	Hosting and infrastructure	Request logs, deployed code
Meta (WhatsApp Cloud API)	WhatsApp message delivery	Guest name and phone (when host sends a message)
Google (OAuth)	Host sign-in	Email and name from your Google account

All providers are contractually required to protect your data and may not use it for their own purposes.

7. Data retention

Guest RSVP data — retained for the lifetime of the event. When an event host deletes their event or RSVP data, it is permanently deleted from our database.
Host account data — retained while your account is active. You may request deletion at any time.
Log data — retained for up to 30 days, then automatically purged.
Uploaded PDFs — retained until removed by the host, or when the event is deleted.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the data we hold about you.
Correction — ask us to correct inaccurate data.
Deletion — ask us to delete your data. Guests may ask the event host to delete their RSVP, or contact us directly.
Portability — request your data in a machine-readable format.
Objection — object to processing based on legitimate interests.

To exercise any of these rights, email invitecircle@gmail.com. We will respond within 30 days.

9. Children's privacy

Invite Circle is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data through a guest RSVP, please contact us and we will delete it promptly.

10. Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security on our database, and service-role key isolation. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take reasonable steps to protect your data.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of Invite Circle after a change constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Invite Circle

Email: invitecircle@gmail.com

Website: invitecircle.in