Your event details stay private.

1. Who we are

Web Invitations ("Web Invitations", "we", "us") operates this website and the invitation design and publishing service described in our Terms of Service. We are the controller for the personal data we collect about users of this site and service. This policy explains what personal data we collect, why, how long we keep it, and the choices you have. Questions can be sent to web.invitations.com@gmail.com.

2. Data we collect

Account data. When you sign in we receive your email address, display name, and — where you sign in with a provider such as Google — the account identifier that provider gives us. Authentication is handled by Google Firebase Authentication; we never see or store your password.

Invitation content. Everything you enter into an invitation: names, event dates, venues, schedules, greetings, dress-code notes, and any photographs you upload. Some of this is likely to concern people other than you — your partner, your family, your guests — and you are responsible for having their agreement to include it.

Order and payment data. We store your order history, what you bought, the amount, the currency, and the payment status. We do not collect or store your card details. Payment is taken by Paddle.com Market Ltd. as merchant of record, and card data is entered directly into Paddle's checkout, never into our systems. Paddle passes back only a transaction reference and outcome.

Messages you send us. If you use the contact form we keep your name, email address, subject, and message so we can reply.

Technical and usage data. Server logs record IP address, browser and device type, pages requested, and timestamps. We also use analytics to understand which designs and pages are used, so we can improve them.

3. Why we use it, and on what legal basis

• To provide the Service — creating your account, saving drafts, publishing your invitation, hosting your images. This is necessary to perform our contract with you.
• To take payment and prevent fraud — processing orders, reconciling them, and issuing refunds. Necessary to perform our contract, and to meet our legal obligations.
• To support you — answering messages and resolving problems. Our legitimate interest in running a usable service.
• To improve the Service — analytics, aggregate usage measurement, and diagnosing faults. Our legitimate interest, or your consent where local law requires it for analytics cookies.
• To meet legal and tax obligations — keeping transaction records for the period the law requires. A legal obligation.

We do not sell your personal data, and we do not use your invitation content or uploaded photographs to train machine-learning models.

4. Published invitations are public

When you publish an invitation it becomes reachable by anyone who has its link. The link is unlisted rather than protected: it is not indexed deliberately, but it is not password-protected and we cannot stop a recipient forwarding it. Treat anything you publish — including your home address, a phone number, or a photograph of a child — as information you are choosing to make available to anyone holding the link. You can unpublish at any time, though copies already cached or saved by others are beyond our reach.

5. Who we share it with

We share personal data only with the service providers that make the Service work, each acting on our instructions or as an independent controller where noted:

• Google Firebase — authentication and analytics.
• Amazon Web Services — application hosting, database, and image storage, in the EU (Frankfurt) region.
• Paddle.com Market Ltd. — payment processing, as merchant of record and an independent controller of the payment data it collects. Paddle's own privacy notice governs that data.

We may also disclose data where we are legally required to, or to establish or defend legal claims. If our business is transferred, data may pass to the acquirer under this policy.

6. International transfers

Our application data is stored in the European Union. Some providers named above process data in other countries, including the United States. Where that happens, transfers are made under an approved safeguard such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

• Draft invitations — until you delete them or delete your account.
• Published invitations and uploaded images — until you unpublish or delete them, or you close your account.
• Order and payment records — for as long as tax and accounting law requires, typically six to ten years, even after account closure.
• Contact messages — up to two years after the matter is resolved.
• Server logs — a rolling period, typically no more than twelve months.

8. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. If you are in the EEA or UK you may also complain to your local data protection authority.

To exercise any of these, write to web.invitations.com@gmail.com. We will respond within the period the applicable law allows, normally one month. We may need to verify your identity first.

9. Security

We use HTTPS in transit, encryption at rest with our infrastructure providers, scoped upload credentials that expire, and access controls limiting who on our side can reach live customer data. No system is perfectly secure, and we cannot guarantee absolute security — but we will notify you and the relevant regulator where a breach requires it.

10. Children

The Service is not directed at children, and we do not knowingly create accounts for anyone under 18. Invitations often include photographs of children; where you upload one, you confirm you have the consent of that child's parent or legal guardian. If you believe a child has given us personal data directly, contact us and we will delete it.

11. Cookies

We use cookies and similar local storage that are strictly necessary to keep you signed in and to remember your language choice, plus analytics cookies to measure usage. You can clear or block cookies in your browser, though doing so will sign you out and may break parts of the Service.

12. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we will make reasonable efforts to tell you about material changes.

13. Contact

Write to web.invitations.com@gmail.com, or by post to Web Invitations, Charents Street, Armavir, Armenia.