Privacy Policy

Who is responsible

Syniria, a company registered in the United States (5830 E 2nd St, Ste 7000 #37147, Casper, WY 82609, US), operates theenvite.com and is responsible for the data described here. Contact: [email protected].

What hosts give us

Account: your email address, a one-way scrambled form of your password, and your sign-in sessions. We use your email to send the password-reset links you ask for.

Invitations: the names, event details, words, photos, music and design choices you add, and the published copy of each invitation.

Payments: Stripe handles your card details. We receive the payment status, amount, currency and Stripe reference numbers.

Requests to make your invitation: the names, event details and notes you send us, and the WhatsApp number or email you give. We use them only to make your invitation and to contact you about it.

What guests give us

Replies: the name, household size, attendance and any wishes a guest sends, plus the entry pass and check-in status for that reply.

A cookie in the guest's browser remembers their household's reply so they can change it later.

How we use data

To provide the envite: saving and showing invitations, collecting replies, processing payments, preventing abuse and answering support requests. We don't sell personal data and we don't show ads.

Cookies

Essential cookies keep hosts signed in and remember a household's reply. When advertising measurement is available, additional functional cookies remember your privacy choice and protect that choice from abuse. A browser preference also remembers a rejection if saving it fails. Cloudflare Web Analytics counts visits without cookies. Our own server also keeps anonymous daily totals of steps such as opening the studio, starting a design, creating an account and publishing, with the ad or website that brought the visit and Cloudflare's country. These totals use no cookies and keep no IP addresses, account details or invitation content; a note kept only for the open browser tab stops a step being counted twice.

Optional Meta advertising cookies (_fbp and _fbc) are used only if you choose Allow advertising cookies. Rejecting them does not prevent you from designing, purchasing or sharing an invitation.

Optional advertising measurement

If you allow it, Meta Pixel measures visits to our public homepage and catalogue demos. Our server can also send checkout starts and verified purchases to Meta. These events use advertising cookie identifiers, browser information, the generic product, purchase amount and currency, and a page address without private invitation identifiers. Meta also receives connection information when your browser contacts its service and may use the data under its own privacy policy.

We do not include names, email addresses, invitation wording, dates, venues, photos, guest replies, entry passes or password-reset links in advertising events. Meta Pixel is not loaded on your studio, account, dashboard, saved invitations or guest entry pages. Advertising cookie identifiers can still identify a browser; they are not anonymous data.

Who processes data for us

Stripe (payments), Cloudflare (network, file storage, email forwarding and visit counts), Sender.net (account emails and our request notices) and Hetzner (servers in Germany or Finland). They process data only to provide their services to us. We may disclose data when the law requires it.

Where data is stored

Our servers are in the European Union, and uploaded photos and music are stored with Cloudflare. Our providers may process data in other countries, including the United States.

How long we keep it

Accounts and invitations, with their guest replies, are kept until you ask us to delete them. Encrypted backups are kept for up to 30 days after that.

An advertising permission lasts up to 180 days. Our checkout attribution identifiers are removed after 30 days. Identifiers in a queued event are removed after delivery, withdrawal, exhausted retries or expiry (within six days); delivery-status records are removed after 90 days. Meta manages its own retention under its privacy policy.

Your choices

You can ask us to access, correct, export or delete your data by writing to [email protected] from your account's email address. Guests can ask the host, or write to us, to remove their reply.

Use Privacy settings on our public or host pages to change your advertising choice. A saved rejection stops future browser events and cancels server events still waiting to be sent. It cannot recall events already sent to Meta. If saving fails, tracking pauses in that browser and we retry saving the rejection when you return; retry or contact us to confirm the server-side choice.

Security

Passwords are stored with salted scrypt hashing, sign-in sessions and password-reset links are stored as one-way hashes, connections use HTTPS, and backups are encrypted.

Children

The envite is meant for adults planning events. It is not directed at children under 16.

Changes

We will post any changes on this page and update the date at the top.