Privacy, in actual human language.

InviMood is the commercial name, service provider, and data controller for the processing described in this notice. The service is operated by an individual carrying on business activities in Mexico.

The designated public channel for privacy, support, billing, and legal requests is support@invimood.com. Verified requests that require additional legal identification are handled privately; the public website does not display the operator’s personal name, tax identifier, or home address.

Host account details: when a host signs in, we receive the name and email made available by the current sign-in provider.

Invitation details: names, invitation copy, occasion, plan choices, dates, times, location, design choices, and the final emoji selected by the host.

Guest replies: a guest may provide a name, attendance answer, vote, guest count, dietary note, suggested date or time, and an optional message. The exact fields depend on the invitation type.

Product activity: an invitation identifier, event type, timestamp, and a short source label when an invite is created, opened, shared, answered, or added to a calendar.

Product feedback: when a signed-in host intentionally sends feedback, we store the message, category, current page, account identifier, and submission time so we can review it and follow up.

Billing and support details: subscription status, billing interval and currency, charge dates, Stripe customer and subscription references, support messages, and the information needed to resolve a request. Stripe receives the name, billing address, and payment details entered in Checkout; InviMood does not receive a full card number or security code.

We use this information to create and deliver invitation pages, save replies, show results to the correct host, operate host accounts, provide calendar actions, secure the service, troubleshoot problems, and understand which product features are useful.

We do not use invitation content or guest replies for targeted advertising, and we do not sell personal data.

Depending on the feature and where you live, we process information because it is needed to provide the service you requested, for legitimate interests such as security and product improvement, with consent where the law requires it, or to comply with legal obligations.

A host can see the replies, votes, guest counts, dietary notes, and messages submitted to an invitation the host owns. Guests do not receive access to the host dashboard or other guests’ responses.

Invitation pages are designed to be excluded from search engines, but an invitation is still accessible to someone who has its link. Search exclusion is not a security guarantee or a substitute for sharing the link carefully.

We use Supabase for account authentication and application data; Stripe for Checkout, subscriptions, billing records, and refunds; Google for Google sign-in and, only after consent, Google Analytics; and hosting, delivery, and security infrastructure providers to operate and protect InviMood. These providers process information for their assigned services under their own terms and privacy commitments.

We may disclose information when required by law, to protect people or the service, or as part of a business reorganization where the recipient continues to honor this notice. We do not give guest lists to data brokers.

InviMood’s product analytics database records the invitation identifier, product action, time, and source label. It does not intentionally include a guest name, invitation message, response text, advertising identifier, or IP address.

The private product dashboard receives aggregated funnel counts. Feedback is kept separately from analytics and may be linked to the host account that intentionally submitted it.

If a visitor selects Allow analytics, InviMood loads Google Analytics to measure page views and product actions such as template selection, account access, invitation publication, guest response completion, Checkout starts, and Pro purchases. InviMood does not intentionally send Google names, email addresses, invitation text, guest replies, or payment-card details.

Google Analytics may receive the page URL, browser and device information, approximate location derived from network information, and the event details described above, and may set first-party analytics cookies. Google signals and advertising personalization are disabled. Selecting Not now leaves Google Analytics off on that browser.

We do not currently use advertising or cross-site tracking cookies. Essential authentication and security technologies may be used when a host signs in. Infrastructure providers may also process network or device information needed to deliver and protect the service.

The browser stores the analytics choice locally so InviMood can respect it on later visits. Clearing browser storage resets that choice.

A functional preference cookie remembers a language a person chooses. Before that choice, the browser language and a country-level request signal may be used briefly to select Spanish or English; InviMood does not store precise location for this purpose.

The Cookie Policy explains each category and includes controls to allow or stop optional analytics at any time on the current browser.

We keep invitations, host details, replies, and related product activity while they are needed to provide the service, maintain the host’s history, meet legal obligations, resolve disputes, or protect InviMood. Closing an invitation stops new replies but does not automatically delete its existing information.

Payment, refund, tax, fraud-prevention, and dispute records may be retained for the period required by law or reasonably needed to establish or defend a claim. Stripe may also retain transaction information under its own legal obligations.

A host or guest may request access, correction, or deletion. We may need enough information to verify the request and locate the relevant invitation or reply before acting.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, and to withdraw consent where consent is the basis for processing.

People in Mexico may request access, rectification, cancellation, or opposition (ARCO rights), withdraw consent where applicable, and challenge a response before the competent authority. Exercising a right will not affect processing that was already lawful.

People in the European Economic Area or United Kingdom may also have rights to data portability, restriction, objection, erasure, and a complaint to their local supervisory authority. People in Brazil may request confirmation of processing, access, correction, portability, deletion or anonymization where applicable, and information about sharing.

Residents of California and other U.S. states may, where the relevant law applies, request to know or access, correct, delete, or receive a copy of information; opt out of sale, sharing, or targeted advertising; limit certain sensitive-data uses; and appeal a denied request. InviMood does not sell personal information or use it for cross-context behavioral advertising, so there is currently no sale or targeted-advertising opt-out to apply.

People in Canada, Australia, and other countries may also have local rights, including access, correction, withdrawal of consent where available, and the ability to complain to a regulator. We will honor mandatory privacy rights that apply to a verified request and will not discriminate against someone for exercising them.

Use the Data Rights page or email support@invimood.com. We may verify your identity, authority, and the relevant invitation before acting, and we will explain any legally permitted denial or appeal route. For a request governed by Mexican law, InviMood will communicate its determination within 20 days and, when granted, make it effective within the following 15 days, subject to legally permitted extensions.

We use reasonable technical and organizational measures to protect information, but no online service can promise absolute security. Information may be processed in countries where our infrastructure providers operate, with safeguards required by applicable law.

InviMood is not directed to children under 13. If local law requires parental permission for a younger user, that permission is required. Contact us if you believe a child provided personal information without appropriate authorization.

We may update this notice as the product changes. The effective date at the top will change when we publish a meaningful revision. Material changes may also be highlighted in the service.