Privacy Policy

Last updated: 2026-08-01

This policy explains what InviteMyDay does with personal data. The controller is Serra Sancakli Işık, Sole trader (individual), Poland, contactable at hello@invitemyday.com.

What we collect

Invitation details you enter: the names, event type, date, time, venue, address and message for your event.

RSVP replies your guests submit: the name they type, whether they are attending, how many people they are bringing and an optional note.

Payment information: when you buy an event package, Stripe processes your payment and shares with us only the confirmation, the amount and the last four digits of the card. We never see or store your full card number.

Your email address at checkout: we store it so we can send you the private link to your invitation and find your event if you contact support. We do not send marketing to it.

Technical data: standard server and security logs kept by our hosting provider, such as IP address and browser type.

What we do not do

We do not sell personal data. Your guest list and your event details are never used for marketing and never leave the service; no advertiser sees them. The only thing shared with Meta, and only if you accepted the cookie banner, is that a browser visited the site and whether it bought.

Why we are allowed to process it

To perform the contract with you: creating your invitation, delivering the paid event package and collecting RSVP replies on your behalf.

Legitimate interest: keeping the service secure and working, and preventing abuse.

Legal obligation: keeping records of payments as required by tax and accounting rules.

Who processes data for us

Vercel Inc., hosting and delivery of the website.

Supabase Inc., the database that stores your invitation and every RSVP reply. Data is held in the European Union.

Resend (Plus Five Five, Inc.), sending the confirmation email that carries your management link.

Stripe, Inc., payment processing. Stripe acts as an independent controller for payment data under its own privacy policy.

OpenStreetMap Foundation, map tiles and venue search, used only while a host has the map picker open. Your IP address reaches them at that moment; guests never trigger this.

Meta Platforms Ireland Limited, advertising measurement, and only if you accepted the cookie banner. Meta learns that a browser visited our site and whether it completed a purchase.

These providers may process data outside your country. Transfers rely on the safeguards required by data protection law, such as standard contractual clauses.

How long we keep it

Event and RSVP data is kept while your event is active and for a reasonable period afterwards so you can look back at your guest list. You can ask us to delete it sooner.

Payment records are kept as long as tax and accounting law requires.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask us to restrict it. Write to us and we will respond within one month.

You also have the right to complain to a data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO).

A note for guests

If you received an invitation and replied to it, the event host is the person who asked for your reply and who sees it. We process it on their behalf. To have your reply removed, ask the host, or contact us and we will help.

Cookies and browser storage

With your consent we place a Meta (Facebook and Instagram) advertising cookie so we can measure whether our ads bring people who actually buy. Nothing is placed until you press Accept, declining costs you nothing, and you can change your mind by clearing this site data. We also store

The management key is what lets this browser open your invitation without an account. Clearing your browser data removes it, which is why we also email it to you after payment. Nothing in this storage is used to track you across sites.

Contact

hello@invitemyday.com, or by phone on +48 512 510 704.