Invitified

PRIVACY POLICY

Privacy Policy

How Invitified currently handles account, invitation, guest-response, contact, and payment-reference information.

Scope

This privacy policy describes how Invitified handles account, invitation, guest-response, contact, and payment-reference information.

Invitified is an electronic invitation platform operated by SUPERMAX ELECTRONICS TRADING - SOLE PROPRIETORSHIP L.L.C., Economic License No. CN-1175816.

Account and session information

When a customer creates an account, the application processes their name, email address, and password. Passwords are stored as password hashes, not as readable passwords.

The service uses essential authentication and session data to sign customers in and keep an account session working. This includes a secure, HTTP-only session cookie and server-side hashed session-token records. These are functional cookies, not a marketing-tracking feature.

Invitation content and uploads

Invitation drafts can contain the template choice, names, event and venue details, text, decorative settings, and supported uploaded media. Project media is stored with the invitation and is encrypted before it is placed in managed object storage.

Draft-only invitation content and uploads are not served anonymously by the application. Once a customer explicitly publishes an invitation, its published content and media used by that published invitation are accessible to people who can access its shareable link. A link is not a private access control.

Guest responses and wishes

Where an invitation creator enables RSVP, the application records the guest's name, attendance choice, optional party size, and message. RSVP responses are available to the invitation owner in the private response report rather than as a public RSVP list.

Where wishes are enabled, the application records the display name and wish message. A creator can configure wishes to appear immediately or to wait for moderation. Wishes marked visible can be shown publicly on that invitation; pending, hidden, and deleted wishes are not shown in the public wishes feed.

Contact submissions and email delivery

The contact form collects the submitted name, email address, subject, and message. A submission is saved before an email notification is attempted, together with delivery-status information needed to administer the notification.

Resend is used to send contact notifications. For support questions, use the contact form or email support@invitified.com.

When account email delivery is configured, the service also uses Resend for welcome messages, password-reset links, and password-change confirmations. The application retains delivery references and status information. Password-reset links are single-use and expire; the service stores a hash of the reset token rather than the readable token.

Payments

Stripe hosts card Checkout. Invitified does not receive or store card numbers, CVC values, or full card details in its application database.

To create and verify a purchase, the application stores payment and publishing-access references and status information, such as Stripe customer, Checkout-session, and payment-intent identifiers; the selected product and price; amount and currency; payment, refund, and dispute status; and a receipt URL where available. It may send Stripe the authenticated account name and email plus identifiers needed to associate Checkout with the account and invitation.

Service providers, maps, fonts, and analytics

The application uses Manus hosting and managed object storage, a MySQL database connection for application records, Stripe for hosted payments, and Resend for configured email delivery.

If an invitation includes a map, its browser can load an embedded Google Maps or OpenStreetMap view, or follow a Google Maps link. The relevant venue location or query is included in that request and the map provider handles it under its own terms and privacy practices.

The current application serves its offered invitation fonts locally. The current client source does not load a third-party analytics or marketing-tracking script, and no marketing-tracking cookie or cookie banner is introduced by this service configuration.

Questions

Use the contact form or email support@invitified.com for a privacy question. Do not send payment-card details through the contact form.