Privacy Policy - Eminvite

This Privacy Policy (the "Policy") describes how the Eminvite service (the "Service", "we") collects, uses, stores, and protects personal data of users and guests invited through the Service.

By using the Service, you confirm that you have read and understood this Policy. If you do not agree with its provisions, please do not use the Service.

1. Who We Are

1.1.The data controller/processor is Eminvite. For personal data inquiries: privacy@eminvite.com
1.2.We operate in accordance with Ukrainian legislation and, when processing data of EU/EEA citizens, the General Data Protection Regulation (GDPR), as applicable.

2. Whose Data We Process

We may process personal data of the following individuals:

Service Users –individuals who register and/or create invitations in Eminvite.
Guests/Invitation Recipients –individuals whose contact information was entered by Users to send them invitations.

By entering guest data, the User confirms having legal grounds to provide us with this data (e.g., guest consent or other lawful basis).

3. What Data We Collect

3.1. User Data

We may collect and process the following data:

•Name and surname (or nickname/organization name)
•Email address
•Phone number (if provided)
•Account credentials (login, encrypted password)
•Interface language, profile settings
•Event data (name, date, time, location, description)
•Service activity history

3.2. Guest Data (Invitation Recipients)

•Guest name (if provided)
•Email address
•Other data (RSVP status, notes, seating arrangements, etc.)

3.3. Automatically Collected Data

•IP address and approximate location
•Device type, browser, and OS
•Cookies and technical logs

3.4. Payment Information

Payments are processed through third-party providers. We do not store complete card data, only limited information to confirm transactions.

4. How We Use Personal Data

4.1. Providing Service Functionality

•Creating and maintaining user accounts
•Creating and sending invitations
•Processing RSVP responses

4.2.Communication: sending service emails, responding to support requests.

4.3.Service Improvement and Analytics: usage analysis, testing new features, monitoring abuse.

4.4.Marketing Communications (with consent): news, updates, special offers. You can unsubscribe anytime.

4.5.Legal Compliance: fulfilling legal requirements, protecting rights and interests.

5. Legal Basis for Processing

Contract Performance –providing the Service, registration, creating invitations
Legitimate Interest –security, fraud prevention, service improvement
Consent –marketing communications, cookie usage, entering guest data
Legal Obligations –accounting and tax compliance

6. Cookies and Similar Technologies

6.1.We use cookies for: proper Service operation, saving preferences, analytics, marketing purposes.

6.2.You can manage cookies in your browser settings. Disabling some types may limit functionality.

7. Data Sharing with Third Parties

7.1. Service Providers (Processors)

We engage third-party services for:

•Sending emails
•Messenger communications
•Payment processing
•Hosting and data storage
•Service usage analytics

7.2.Legal Requirements: data transfer to comply with law, court decisions, rights protection.

7.3.Business Reorganization: data may be transferred to successors with privacy compliance.

We do not sell your personal data to third parties as a separate product.

8. International Data Transfers

Our servers or contractor servers may be located in other countries. When transferring data outside Ukraine/EU/EEA, we take measures to ensure adequate protection (standard contractual clauses, transfers to countries with adequate protection).

9. Data Retention Period

We retain personal data:

•While the account is active
•For the period necessary to fulfill processing purposes
•For periods required by law

Guest data is retained while invitations remain in your account, or until account deletion. Upon account deletion, we may retain minimal transaction data as required by law.

10. Data Subject Rights

You (and your guests) have the following rights regarding personal data:

Right of Access –obtain confirmation of processing and data copy
Right to Rectification –request correction of inaccurate data
Right to Erasure –request data deletion in cases provided by law
Right to Restriction –restrict processing in certain cases
Right to Portability –obtain data in machine-readable format
Right to Object –to processing based on legitimate interest or marketing
Right to Withdraw Consent –at any time without affecting previous processing
Right to Complaint –file a complaint with the data protection authority

To exercise your rights, contact us using the details in Section 14. We may request additional information to verify your identity.

11. Data Security

We implement technical and organizational measures to protect data from:

•Unauthorized access
•Accidental loss or destruction
•Unlawful processing

Measures include: encryption (HTTPS), access restrictions, regular software updates. However, no system guarantees absolute security. You are also responsible for maintaining the confidentiality of your account credentials.

12. Children's Data

The Service is not intended for direct use by children under 16 without parental/guardian consent. If we learn of receiving a child's data without proper consent, we take steps to delete such data.

13. Policy Changes

13.1.We may update this Policy. The new version becomes effective upon publication.
13.2.We recommend reviewing the Policy periodically. Continued Service use means acceptance of the updated version.

14. Contact Information

For questions about this Policy or personal data processing, contact:

Email: privacy@eminvite.com