Privacy policy

1. Data controller

Invitly, located in Puebla, México, is responsible for processing your personal data. For any question about this policy, write to [email protected] or message us on WhatsApp.

2. Personal data we process

We only ask for what we need to make your invitation:

• Identity and contact: name, WhatsApp or phone number and email.
• Event details: type of celebration, date, times, venues, names of the honorees, relatives and sponsors, texts, photos and music you choose to include.
• Payment data: payment receipts and, if you request an invoice, your tax details. We never receive or store card numbers.
• Third-party data: names of guests or others you decide to include. By providing them, you confirm you have their permission.
• Website browsing data: described in the cookies section.

We do not ask for sensitive personal data. If a photo or text you send reveals any, it will only be used for the invitation you requested.

3. Necessary purposes

These purposes are essential to provide the service, so they do not require your consent:

• Responding to your request and sending a quote.
• Designing, reviewing with you, publishing and delivering your digital invitation at a link.
• Providing support and agreed changes during the contracted period.
• Processing payments and issuing invoices when requested.
• Complying with legal obligations.

4. Additional purposes (require your consent)

• Showing your invitation or parts of it as an example of our work on our website and social media.
• Sending you offers or news.
• Asking for your feedback and, with your permission, publishing it as a testimonial.

You can opt out at any time by writing to [email protected] or on WhatsApp with the message “I opt out of additional purposes”. Opting out does not affect the service you purchased.

5. Publishing your invitation

Your invitation is published at a web address that anyone with the link can view. We ask search engines not to list it. It stays online for your package's validity period, and you can ask us to remove it earlier at any time.

6. Service providers and transfers

We rely on providers that process data on our behalf and under our instructions: web hosting (HostGator), content delivery and security (Cloudflare), messaging (WhatsApp, by Meta), payment services (such as Mercado Pago, PayPal, Zelle, Venmo, Nu or your bank) and, only if you accept them, measurement tools (Google Analytics and Meta). Some are located outside Mexico.

We do not sell your data. We only share it with authorities when required by law or a competent order. We make no transfers that require your consent.

7. Your rights and withdrawing consent

You can access, correct, delete or object to the processing of your data (ARCO rights), and withdraw your consent or limit its use. Send your request to [email protected] including: your name and a way to reply; a document proving your identity (or your representative's); the right you want to exercise and the data involved; and anything that helps us locate it.

We will reply within the legal timeframes. If you believe your request was not properly handled, you may contact Mexico's Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), the data protection authority.

8. Cookies and similar technologies

This site uses no advertising or analytics cookies unless you accept them in the cookie notice. Without your acceptance it only uses:

• Your browser's local storage to remember your cookie choice.
• Session storage to note which campaign brought you (for example, Instagram) and add that reference to the WhatsApp message you choose to send.
• Cloudflare security cookies, needed to protect the site.

If you accept, Google Analytics and the Meta pixel may set cookies to measure visits and the results of our ads. You can change your choice with the “Cookie preferences” link in the footer or delete cookies in your browser.

9. Changes to this policy

Any changes will be published on this page with the date of the update.