Privacy policy

1. What we collect

Account information

When you sign up, we collect your name, email address, and authentication credentials (managed via Google OAuth).

Wedding details

Information you add about your event — wedding date, location, couple names, and other planning details you choose to store.

Guest data

Names, email addresses, RSVPs, dietary requirements, and other information you enter for your guests. This data is entered by you and belongs to you — we store it on your behalf as a data processor.

Usage data

Information about how you use the platform — pages visited, features used, and actions taken. This helps us improve the product.

Payment information

Payments are processed by Stripe. We do not store your card details. Stripe's privacy policy governs how your payment data is handled.

AI conversations

When you interact with Ava (our AI assistant), your messages and Ava's responses are processed. These interactions may be reviewed to improve the service.

2. How we use your data

• To provide, maintain, and improve the OpenInvite platform
• To power AI features — Ava uses your wedding context to give relevant advice
• To send service-related notifications (booking reminders, feature updates) — with your consent
• To respond to support requests and enquiries
• To detect and prevent fraud or abuse

We do NOT sell your personal data to third parties. We do NOT use guest data for advertising.

3. AI and data

Ava is powered by Anthropic's Claude AI. When you use Ava, your conversation and relevant wedding context is sent to Anthropic's API to generate responses. Anthropic's privacy policy governs how they handle this data.

• AI conversations may be reviewed to improve the service
• Ava's suggestions are assistive only — not professional legal, medical, financial, or cultural advice
• You remain responsible for all final content, decisions, and communications
• Verify any cultural, religious, or sensitive suggestions independently

4. Guest data — your responsibilities

When you store your guests' personal information in OpenInvite, you are the data controller and we are the data processor.

• You are responsible for having a lawful basis to store your guests' information
• You should inform guests that their details are being stored for event coordination purposes
• Guest data is linked to your account and is deleted when you delete your account
• Do not store sensitive data (medical records, financial information) beyond what is needed for event planning

5. Data storage and security

Your data is stored securely via Base44's infrastructure. All data is encrypted in transit (TLS) and at rest. We use industry-standard security practices to protect your information.

We regularly review our security practices and respond promptly to any identified vulnerabilities. If you discover a security issue, please contact us at hello@openinvite.com.

6. Your rights

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — update or correct inaccurate data
• Deletion — delete your account and all associated data
• Portability — export your data in a portable format
• Withdraw consent — opt out of non-essential communications at any time

EU/UK users (GDPR): You have additional rights including the right to object to processing and the right to lodge a complaint with your supervisory authority.

Australian users: Your rights are governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

To exercise any of these rights, contact us at hello@openinvite.com or use our data deletion page.

7. Cookies

We use cookies to keep you logged in and remember your preferences. For full details, see our Cookie policy.

8. Third-party services

We use the following third-party services to provide OpenInvite:

• Base44 — database infrastructure and backend services
• Anthropic — AI (powers Ava)
• Stripe — payment processing
• Vercel — hosting and deployment
• Google — authentication (Google sign-in)

Each of these services has its own privacy policy governing how they process data on our behalf.

9. Data retention

• Active accounts: data is kept for as long as your account is active
• Deleted accounts: all data is removed within 30 days of account deletion
• Backups: backup copies are purged within 90 days
• Legal obligations: some data (e.g. transaction records) may be retained longer where required by law

10. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us:

Email: hello@openinvite.com
Website: openinvite.com/contact