Privacy Policy

1. Who We Are

invit.rsvp is an event RSVP and guest management platform operated by LIVE PIXEL MEDIA SRL, based in Romania, EU. Contact: [email protected].

2. What Data We Collect

We collect data necessary to provide our service:

• Event organizers (clients): email address, password (hashed), company name (optional), payment information (processed by Stripe, never stored on our servers)
• Event guests (attendees): name, email, phone number, company, and any custom fields configured by the event organizer (e.g. dietary requirements, companion details)
• Check-in data: arrival time, QR code scans
• Technical data: IP address, browser type, pages visited (via Google Analytics), cookies for session management

3. How We Use Your Data

We use personal data exclusively to:

• Provide and maintain the RSVP and guest management service
• Send confirmation emails, reminders, and event-related communications
• Generate digital badges and QR codes for event check-in
• Process payments (via Stripe)
• Send platform notifications and support communications
• Improve our service through anonymous analytics

We do NOT sell, rent, or share personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process personal data based on:

• Contract performance: processing necessary to provide our service to clients and handle RSVPs
• Legitimate interest: improving our service, preventing fraud, ensuring security
• Consent: when guests submit their RSVP form, they consent to data processing for that specific event
• Legal obligation: when required by law (e.g. tax records for payments)

5. Data Controller vs. Data Processor

invit.rsvp acts as a Data Processor for guest data collected through event RSVP forms. The event organizer (our client) is the Data Controller and determines what data is collected and how it is used.

invit.rsvp acts as a Data Controller for client account data (email, payment info) and website visitor data.

6. Data Sharing & Third Parties

We share data only with:

• Stripe,payment processing (PCI DSS compliant)
• Brevo (Sendinblue),email delivery service
• Cloudflare,CDN and DDoS protection
• Google Analytics,anonymous website analytics (on the main website only, not on client event pages)
• Anthropic (Claude AI),support chat assistance (messages processed for automated responses)

All third-party providers are GDPR compliant or operate under Standard Contractual Clauses.

7. Data Storage & Security

• Data is stored on servers located in the European Union (Germany)
• All connections are encrypted via TLS/SSL (HTTPS)
• Passwords are hashed using bcrypt
• Each client's data is isolated in a separate database
• Access to servers is restricted and monitored
• Regular backups are performed

8. Data Retention

• Client accounts: data retained while account is active, deleted upon request or 12 months after account expiration
• Guest RSVP data: retained as long as the client's event is active, deleted when the client account is removed
• Payment records: retained for 5 years as required by tax law
• Support chat messages: retained for 12 months
• Analytics data: anonymized, no personal data retained

9. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access,request a copy of your personal data
• Rectification,correct inaccurate data
• Erasure,request deletion of your data ("right to be forgotten")
• Restriction,limit how we process your data
• Portability,receive your data in a portable format
• Objection,object to processing based on legitimate interest
• Withdraw consent,at any time, without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

For event guests: to request data deletion or modification, contact the event organizer directly. If you cannot reach them, contact us and we will assist.

10. Cookies

We use minimal cookies:

• Session cookie (PHPSESSID),essential for login functionality, expires when browser closes
• Language preference,remembers your language selection
• Google Analytics cookies,on the main website only (invit.rsvp), not on client event pages

No advertising or tracking cookies are used on client event pages.

11. Children's Privacy

Our service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.

12. International Data Transfers

Your data is primarily stored and processed within the EU. When third-party services process data outside the EU (e.g. Stripe, Cloudflare), they do so under Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

13. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of our service after changes constitutes acceptance of the updated policy.

14. Supervisory Authority

If you are not satisfied with our response to your data request, you have the right to lodge a complaint with your local data protection authority. In Romania, this is the ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal),www.dataprotection.ro.

15. Contact

For any questions regarding this privacy policy or your personal data:

Email: [email protected]
Website: invit.rsvp