Privacy policy

Who we are

invitesyou is a digital invitation service run from Montréal, Quebec.

Our person in charge of the protection of personal information is Joe. You can write to them at elie@theofficeweb.com with any question about this policy or to exercise your rights.

Who is responsible for what

The person or organization who sends an invitation (the host) is responsible for their guests’ information: the host decides whom to invite and what to ask them. invitesyou processes that information on the host’s behalf, only to run the invitation.

If you are a guest, you exercise your rights through the link in every message you receive, which leads to the invitation’s privacy page, or by writing to elie@theofficeweb.com. We pass on to the host the requests that are theirs to decide.

For hosts’ accounts, invitesyou is responsible for the information it collects.

What we collect

We collect only what the service needs to work.

• Hosts: name, email address, preferred language, the organizations and events they create, and the content of their invitations.
• Payments: handled by Stripe. We keep the state of the payment and the plan, never the card number.
• Guests: the name, email address and phone number the host provides, answers to the invitation, visits to the invitation page, and the messages and photos they post.

Why, and on what basis

We use hosts’ information to run their account, their payments and their invitations.

We send invitations, reminders and messages by email on the host’s instruction. Texts go out only when the host confirms that the guests have consented to receive them.

We sell no personal information and do not use it for advertising.

Where the information is kept

The information is hosted in the United States by providers that process it for us:

• Vercel: hosting of the site and storage of files (Vercel Blob)
• Neon: database
• Resend: sending emails
• Twilio: sending texts
• Stripe: payments

This information is therefore communicated outside Quebec. Before doing so, we assessed the sensitivity of the information, the purposes it is used for, the protection measures in each provider’s contract and the legal framework that applies in the United States, and we concluded that the information receives adequate protection there.

How long we keep it

We keep information as long as it is needed, then delete it:

• Events and guests: until the host deletes them, or at the latest 24 months after the event.
• Removed photos: 30 days.
• Delivery logs for emails and texts: 90 days.
• Backups: 30 days.
• Records used to limit abuse: 1 day.

Cookies

We use only two cookies: the session cookie, which keeps a host signed in, and the language preference. We use no advertising trackers.

Children

The service is not meant for children. Information about a child under 14 may be provided only by their parent or guardian, for example when a parent answers for their family.

Your rights

At any time, you can:

• access your information;
• have it corrected;
• have it deleted;
• withdraw your consent, for example to emails or texts;
• file a complaint with the Commission d’accès à l’information du Québec or with the Office of the Privacy Commissioner of Canada.

Write to Joe at elie@theofficeweb.com. We answer within 30 days.

Confidentiality incidents

If an incident affects your information and presents a risk of serious injury, we notify the people concerned and the authorities as Law 25 and PIPEDA require, and we keep a register of incidents.

Emails and texts

Every email carries an unsubscribe link, and replying STOP to a text stops the texts. This is how we comply with Canada’s Anti-Spam Legislation (CASL) and the US CAN-SPAM Act and TCPA.

Changes to this policy

The date at the top of the page shows the last update. If a change is significant, we will tell account holders by email.