Privacy policy

Who is responsible for what

For your own account data (name, email address, payment records, logs), UKIYO BV is the controller.

For the data you enter about your guests as a host (guest lists, RSVPs, photos, messages) you are the controller and YourInvited acts as your processor. The arrangements for that are set out in the processing clause in our terms of service.

Data we process

Depending on how you use YourInvited, we process:

• Host account data: name, email address and an encrypted password.
• Order and payment records: what you bought, the amount, the status and the payment provider's transaction id. Your card or bank details never reach us.
• Guest lists entered by hosts: names and (optionally) email addresses of invitees.
• Guest RSVP responses: attendance, party size, dietary preferences, song requests and messages.
• Photos guests upload through the throwaway-camera module, and guestbook messages: written text, up to three photos and/or a spoken audio message (max. 30 seconds). Audio is a recording of a voice and therefore personal data.
• Gift list: the name a guest leaves when reserving a gift, and the payment details (account number, account holder, payment link) the host enters themselves to show their guests.
• Messages sent through the contact form.
• Feedback you give us in the studio (what you miss, what goes wrong, how smooth it went).
• Technical logs (such as IP address) for security and abuse prevention.

Why we process it (legal bases)

We process account data and invitation content to provide the service (performance of a contract, art. 6.1.b GDPR). Order and payment records are processed to perform the contract and to meet our accounting and tax retention obligations (art. 6.1.c GDPR). Security logging and abuse prevention rest on our legitimate interest (art. 6.1.f). Account emails (verification, password reset, order confirmation, RSVP confirmations) are necessary to provide the service. Feedback you give us, and one single email shortly after you register asking what you miss, are processed on the basis of our legitimate interest in improving the service (art. 6.1.f); you can object at any time, for instance by replying to that email. A reason you give when deleting your account is kept without any link to your account.

Guest data (guest lists, RSVPs, photos) is entered by or on behalf of the host. The host is responsible for informing their guests and needs their own legal basis for doing so; YourInvited processes this data solely on the host's instructions to support the event.

Who we share data with (processors)

We never sell data and never use it for advertising. We rely on a small number of processors, each under a data processing agreement:

• Resend (email delivery): processes email addresses and message content.
• Mollie B.V. (payments): processes your payment details as an independent controller; we only receive the transaction id, the amount and the status.
• Our hosting provider: the application and PostgreSQL database run on servers within the EU.
• Google Ireland Ltd. (Google Analytics): processes anonymised visit statistics, only after you agreed to that in the cookie banner. See the cookie policy below.

Transfers outside the EU

We aim to keep all data within the European Economic Area. Where a processor nonetheless processes outside the EEA, this is based on an adequacy decision or the European Commission's standard contractual clauses. Google Analytics may process data in the United States; Google LLC is certified under the EU-US Data Privacy Framework.

Fonts, the stock photos in the themes and other assets are served from our own servers, so viewing an invitation does not send your IP address to third parties.

Retention

Account data is kept for as long as your account exists. Invitations, guest lists, RSVPs, gift lists with their reservations, and photos are kept until the host deletes them or the account is deleted. Deleting your account permanently erases all your invitations along with the associated guest data and photos.

Order and invoice records must be kept for seven years under Belgian bookkeeping law. They therefore survive account deletion, but are only used to meet that obligation.

Gift list and payments

The gift list lets a host show a wish list and, if they want, their own account number or payment link beside it. We display those details and do nothing else: YourInvited never receives, holds, processes or forwards any payment from a guest to a host.

If you contribute as a guest, that payment happens directly between you and your hosts, outside YourInvited. We cannot see whether it happened, cannot refund it and are not a party to it. If the details look wrong, contact your hosts.

As a host you warrant that the payment details you publish are yours, are correct, and that you are entitled to display them. They are visible to anyone holding the link to your gift list.

Photos and guests

The throwaway camera and the guestbook let guests leave content on the host's invitation: photos, written messages and spoken audio messages. As a host you warrant that your guests know photos and voice recordings are being collected and that you have permission for photos and recordings of identifiable people, in particular of minors. A guest records the clip themselves and can delete it before sending; when the guestbook wall is public, other guests can listen to it.

Is there content on an invitation that should not be there? Email hello@yourinvited.app and we will remove it.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data.

In your studio, under “Account”, you can download all your data (export) and permanently delete your account. For other requests, email hello@yourinvited.app.

If you are unhappy with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels (dataprotectionauthority.be).

Security

Passwords are stored hashed (bcrypt), connections use HTTPS, and access to guest data is restricted to the owner of the invitation. Public uploads are limited in size and frequency. In case of a data breach that poses a risk to you, we notify the Data Protection Authority within 72 hours and, where required, you as well.

What we store

The following storage is strictly necessary for the site to work:

• Session cookie (logged-in hosts): keeps you securely signed in; expires after 7 days.
• Short-lived security cookies during registration and password reset: expire after 10 minutes.
• yourinvited-lang (local storage, and a cookie once you pick a language yourself): remembers your language choice (NL/EN), so we do not send you back to the language of your browser; the cookie expires after one year.
• A local copy of the design you are working on, so your work is not lost if you close the tab.

Analytics cookies (consent only)

On your first visit a banner asks whether we may use Google Analytics. Until you agree, nothing from Google is loaded and no analytics cookie is set. If you decline, we remember that and do not ask again.

If you agree, Google Analytics 4 sets the cookies _ga and _ga_<id> (lifetime at most 13 months). We use them to count visits and page views; Google Analytics 4 does not store IP addresses. We do not use this data for advertising and do not share it with other parties.

You can withdraw your consent at any time through the Cookie settings button at the bottom of every page: the banner then reappears and you can decline. Afterwards, remove the existing _ga cookies in your browser settings.

No other third-party connections

Fonts, the stock photos in the themes and other assets are served from our own domains. Your browser therefore does not need to connect to third parties to display an invitation, and your IP address is not shared with them. The invitation pages themselves run no Google Analytics either.

Only when you actually pay are you redirected to Mollie's secure payment environment, which applies its own cookie policy there.

Managing storage

You can clear cookies and local storage at any time in your browser settings. Without the essential cookies you cannot log in.