Privacy

Invite App provides printed party invitations and private RSVP pages. It is operated by Brant Ward, a sole trader in Australia trading as Stuff On Screen.

Each published invitation has a private link with a random code. Pages are unlisted, excluded from search indexing and not cached. One invitation’s link cannot be derived from another.

Pages expire 14 days after the party by default. You can choose between 1 and 60 days or close a page early. The printed QR code no longer opens the invitation after expiry or closure. All unavailable links show the same page. Optional PIN protection includes limits on incorrect attempts.

Home addresses appear on printed invitations but are hidden from RSVP pages and calendar downloads by default. One setting controls both online uses. Venue addresses are visible by default.

Photos, AI artwork made from photos and uploaded designs are hidden from RSVP pages unless you enable them. Uploaded designs may contain personal information, including an address.

RSVPs include a name, attendance and the number of adults and children. Allergy notes and a message are optional. Email is only requested if the host enables it and remains optional for guests. RSVP details are visible only to the host and are deleted with the party.

Guests do not need an account and are never emailed. We do not store their IP address, device or location. Cookies allow guests to edit their RSVP in the same browser and remember a valid PIN. Neither cookie contains identifying details. Abuse prevention uses a non-reversible, hashed connection identifier for up to a day.

Source photos and your chosen theme are sent to OpenAI to generate the artwork. We do not store source photos. OpenAI does not use them for model training, but may retain them for up to 30 days for abuse monitoring.

Generated artwork is stored for printing and deleted with the party.

Photos used in photo frames are stored privately for printing. They are deleted when you remove them, delete the party or delete your account.

Uploaded designs are stored on the same basis. Each design is sent to OpenAI (United States) for an automated safety check. You must have permission to use uploaded content. Reported images are removed and the host is contacted.

We store your email address, display name, notification preferences, referral source, first publication date and last daily summary date. Sign-in uses a 6-digit email code that expires after 10 minutes.

Account emails include sign-in codes, RSVP notifications and deletion notices. In Settings, you can choose individual RSVP notifications, a daily summary or no notifications. Guest reminders are messages you copy and send yourself.

Cookies maintain your sign-in session and Light or Dark appearance preference. Auto appearance sets no preference cookie. Two referral cookies record which RSVP page referred you and which link wording was shown. They contain random identifiers, expire after 30 days and are cleared at sign-in. There are no advertising or cross-site tracking cookies.

Page assets, including fonts, scripts and images, are served from our domain. We use no third-party analytics, advertising tags or cross-site tracking.

We count RSVP page visits by QR scan or link, as totals per party rather than per person. We also retain service totals, such as the number of published invitations.

Cloudflare hosts the app, database and files, and delivers email. Its global network may process data outside Australia.

OpenAI (United States) processes AI designs and uploaded-design safety checks. Inputs are not used for training and may be retained for up to 30 days for abuse monitoring.

We do not sell personal information or share it with advertising networks, analytics vendors or data brokers for marketing.

Party details, RSVPs, photos and designs are deleted 12 months after the party. We send an email 30 days before deletion. You can extend storage by a year or delete the party earlier.

Sign-in codes expire after 10 minutes. Hashed rate-limit counters are removed within days. Aggregate counts contain no personal information and are retained. Database backups used for recovery expire within 30 days, including any deleted data they contain.

Deleting your account in Settings immediately deletes your parties, RSVPs, photos, designs and email address. RSVP pages become unavailable. Deleted data may remain in recovery backups for up to 30 days. If your last sign-in was more than a day ago, you must sign in again first.

Invite App is for parents and carers. We do not knowingly collect information directly from children. Parents provide their child’s first name and any photos, and control where they appear. Using photos of other children requires their parents’ permission.

You can view and edit your account and party information in the app, and delete your account at any time. Complaints can also be made to the Office of the Australian Information Commissioner (OAIC).

We follow the Australian Privacy Principles and aim to meet GDPR expectations for access, correction and deletion.

Material changes to this policy will be explained here and reflected in the update date.