Privacy Policy

Last updated: May 27, 2026

1. Introduction

VibeInvite (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital invitation platform (the “Service”). By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and, if you use Google OAuth, your Google account name and profile picture. This information is managed through Supabase Auth.

2.2 Event and Guest Data

When you create events, we store event details (title, date, location, theme preferences) and guest information (names, email addresses, phone numbers, dietary preferences, RSVP responses) as provided by you. This data is stored in Supabase PostgreSQL.

2.3 Payment Information

Payment processing is handled by PayPal, our Merchant of Record. We do not store or have access to your full credit card details. PayPal collects billing information necessary to process your payments. See PayPal’s Privacy Policy for details on their data handling.

2.4 Automatically Collected Information

We may automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, and usage patterns. This data is used for analytics and service improvement purposes.

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To process payments and manage subscriptions through PayPal
  • To send invitation emails on your behalf through Resend
  • To authenticate your account and secure your data
  • To generate AI-assisted invitation copy at your request
  • To communicate with you about your account, updates, and support inquiries
  • To comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Third Parties

We share your data only with the following third-party service providers, and only to the extent necessary to provide the Service:

Supabase

Database hosting, authentication, and file storage. Data is stored in Supabase-managed infrastructure. Privacy Policy

PayPal

Merchant of Record for payment processing, tax collection, and invoicing. PayPal is based in Estonia (EU) and complies with GDPR. Privacy Policy

Resend

Transactional email delivery for sending invitations to your guests. Privacy Policy

OpenAI / Anthropic

AI-powered copywriting assistance. Invitation text generation requests are sent to these providers for processing. No guest personal data is included in AI requests.

5. Data Retention

We retain your account data and event information for as long as your account is active. Guest data is retained as part of your event records. You may request deletion of your account and associated data by contacting us. Payment records are retained by PayPal in accordance with applicable tax and accounting laws (typically 7 years).

6. Data Security

We implement industry-standard security measures including encryption at rest (Supabase) and in transit (TLS/HTTPS). Authentication is managed through Supabase Auth with Row-Level Security policies on all database tables to ensure users can only access their own data. No security measure is perfect, and we cannot guarantee absolute security of your data.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to certain processing of your data

To exercise any of these rights, please contact us at support@vibeinvite.bzwl.club.

8. Cookies

The Service uses essential cookies for authentication and session management (managed through Supabase Auth). We do not use third-party advertising or tracking cookies. You may configure your browser to reject cookies, but this may affect the functionality of the Service.

9. Children’s Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Data Transfers

Our service providers operate in multiple jurisdictions. Supabase servers may be located in various regions worldwide. PayPal is based in Estonia (EU) and processes data in compliance with GDPR. By using the Service, you consent to the transfer of your data to servers outside your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact

For privacy-related inquiries, contact us at support@vibeinvite.bzwl.club.