Privacy Policy for InvitePix

1. Introduction

InvitePix ("InvitePix," "we," "us," or "our") is provided by a sole proprietor who is a United States citizen currently residing in Colombia. We are not incorporated as a US company or a Colombian company at this time. Our hosting, database, and payment infrastructure is primarily located in the United States (for example VPS hosting, Supabase, and Polar). We provide event photo and video sharing and storage packages to consumers internationally, including in the European Economic Area and United Kingdom. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketing website (invitepix.com), customer and guest applications, and related services (collectively, the "Service"). Payments may also be processed by other providers we enable for your region (for example Wompi).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service, including facilitating event creation and management.
• Facilitate seamless photo and video uploads to designated event galleries.
• Enable event organizers to manage and curate their private galleries.
• Improve, personalize, and develop new features for our Service.
• Ensure the security and integrity of our platform and prevent fraudulent activity or abuse.
• Communicate with you regarding your account, event, purchases, or important updates about the Service.
• Measure marketing and site performance. On invitepix.com, third-party analytics and advertising technologies run only after you accept cookies; first-party measurement described below may run as needed to operate and understand the Service.
• If you Accept cookies and later complete a purchase, we may send conversion and measurement data (for example a Google click ID when present, purchase value, and a hashed email or phone) to advertising platforms such as Google Ads so we can measure whether ads led to a sale. We do this only for Accept journeys. If you choose No Thanks, we do not store ad click IDs or send those conversions to Google Ads or similar ad platforms.

4. How We Share Your Information

InvitePix does not sell your personal information as a customer list. We may share personal information with service providers and, after cookie consent on our marketing site, with analytics and advertising partners as described below. We may share your information in the following circumstances:

• With Event Organizers: Any content uploaded by a guest (photos, videos, optional name/message) is shared directly with the InvitePix customer who owns and manages that specific event gallery. For guest gallery content, the organizer is primarily responsible for how that content is used.
• With Service Providers: We use trusted vendors to run the Service, including Supabase (database/auth), Cloudflare (CDN, security, storage, and image delivery), payment processors such as Polar and Wompi (as enabled), and email providers such as Resend. These providers process data on our behalf under their terms and applicable agreements.
• With Analytics and Advertising Partners (marketing site, after consent): If you accept cookies on invitepix.com, limited data may be processed by Google (Analytics, Tag Manager, and Google Ads conversion measurement), Meta (Pixel), and Microsoft (Bing UET and Clarity) to help us understand traffic and measure advertising. If you complete a purchase after Accept, we may also send a server-side conversion to Google (and similarly to Meta when configured) that can include a click ID, transaction amount, and hashed contact details. Declining cookies prevents these third-party tags from loading and prevents ad-platform conversion uploads that rely on marketing consent.
• For Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers / With Your Consent: In connection with a merger, acquisition, or sale of assets, or for any other purpose with your explicit consent, your information may be shared as described at that time.

5. Data Security

We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. This includes using encryption for data in transit and at rest, implementing access controls, and leveraging secure cloud infrastructure. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information and mitigate the privacy risks of digital guestbooks, we cannot guarantee its absolute security.

6. Data Retention

• Event Organizer Account Data: We retain your account information for as long as your InvitePix account is active. Upon account termination, we aim to delete your account data within 30 days, unless a longer retention period is required or permitted by law (for example, payment or fraud records).
• Guest Uploads: The retention of photos and videos uploaded by guests is primarily governed by the event organizer's settings and their selected InvitePix service plan. InvitePix customers are responsible for managing the content in their galleries.
• Session Data: Temporary upload sessions for guests typically expire within 5-15 minutes for security purposes.

7. Your Data Protection Rights

Depending on where you live, including under Colombian Law 1581 of 2012 and, where applicable, the EU/UK GDPR, you may have rights to:

• Access: Request access to the personal information we hold about you.
• Rectify: Request correction of inaccurate or incomplete personal information.
• Erase: Request deletion of your personal information, under certain conditions.
• Restrict Processing: Request that we restrict the processing of your personal information, under certain conditions.
• Object to Processing: Object to our processing of your personal information, under certain conditions.
• Data Portability: Request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
• Withdraw Consent: Where processing is based on your consent (for example, marketing cookies on invitepix.com), you have the right to withdraw that consent at any time.

For photos or videos in a specific event gallery, please contact the event organizer first. They control that gallery. To exercise rights with InvitePix about your customer account or our processing, email support@invitepix.com. We aim to respond within 30 days. We do not currently offer a California "Do Not Sell or Share" program because we are a small consumer service and do not claim CCPA compliance; if that changes, we will update this policy.

8. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you become aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers. Guest Uploaders must be at least 13 years old. If an individual is between 13 and the age of majority in their jurisdiction, parental consent may be required for their use of the Service.

9. International Data Transfers

Your information is typically processed using United States-based infrastructure and vendors (for example hosting, Supabase, Cloudflare, Polar, and Google), and may also be accessed by us from Colombia where the operator currently resides. Data protection laws may differ from those in your jurisdiction. Where Colombian Law 1581 of 2012 applies because of our residence in Colombia, we observe applicable obligations under that law. We rely on appropriate safeguards offered by our providers and applicable law. By using the Service, you understand that your information may be processed outside your country of residence.

10. Cookies and Tracking Technologies

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy, cookies, or your data rights, please contact us:

Email: [email protected]