Privacy Policy
Contents
1. Introduction
This Privacy Policy explains how Invitesia (“we”), a digital invitation service operated by Zayeen LLC, collects, uses, stores and protects personal data when you access www.invitesia.com and all its features (the “Service”).
By creating an account or using the Service, you confirm that you have read and understood this policy. If you do not agree with it, please stop using the Service.
2. Data We Collect
a. Data you provide directly
- Account data: name, email address, phone/WhatsApp number and password (stored in encrypted/hashed form).
- Invitation content: couple or host names, event date and location, photos, videos, background music, welcome messages and other information you upload.
- Guest lists: guest names and WhatsApp numbers/email addresses you enter or import.
- Transaction data: packs purchased, credit history and proof of payment.
- Communications: the messages you send when contacting support or submitting a contact form.
b. Automatically collected data
- IP address, device type, operating system and browser type.
- Pages visited, access times and referral sources.
- Invitation statistics: invitation link visits, invitation opens and RSVP confirmations.
c. Data we do not collect
We do not store your credit card number, CVV or banking credentials. All payments are processed by certified third-party payment providers.
3. Invitation Guest Data
When you upload a guest list, you are the data controller for that information, and Invitesia acts as a data processor carrying out your instructions. You are responsible for ensuring you are entitled to use that guest data to send invitations.
We only use guest data to:
- Send invitation links through WhatsApp, email or other channels you choose;
- Record attendance confirmations (RSVP) and guest wishes;
- Display attendance statistics on your dashboard.
We never use your guest list for our own marketing, sell it or share it with other users.
4. How We Use Data
We use your data for the following purposes:
| Purpose | Example use |
|---|---|
| Providing the Service | Creating, storing and displaying your digital invitations. |
| Processing transactions | Activating packs, adding credits and sending receipts. |
| Customer support | Answering questions and resolving technical issues. |
| Security | Detecting abuse, spam and unauthorised access. |
| Product improvement | Analysing feature usage in aggregate and anonymously. |
| Notifications | Sending important information about accounts, billing or Service updates. |
5. Grounds for Processing
We process personal data on one of the following grounds, as set out in Indonesia's Law No. 27 of 2022 on Personal Data Protection:
- Consent from you, for example to send promotional material;
- Performance of a contract, namely providing the Service you signed up for;
- Legal obligations, for example keeping transaction records;
- Legitimate interests, for example maintaining system security.
6. Data Sharing
We do not sell personal data. Data is only shared with the following parties to the extent necessary:
- Infrastructure providers: hosting and file storage services.
- Payment providers: to verify and process transactions.
- Messaging providers: to forward invitation links through WhatsApp or email.
- Analytics services: in the form of aggregate data that does not identify individuals.
- Competent authorities: where required by law or a lawful court order.
Each partner is bound by confidentiality obligations and may only use data for the purposes we specify.
8. Storage & Retention
- Account data is stored for as long as your account is active.
- Invitation content and guest lists are stored while the invitation is active, and you can delete them at any time from your dashboard.
- After an account is deleted, data will be permanently deleted within 30 days, except transaction records we must retain for accounting and tax purposes.
- Encrypted backups may remain for up to 90 days before being automatically overwritten.
9. Security
We implement reasonable safeguards, including HTTPS/TLS encryption for data in transit, password hashing, restricted internal access and monitoring of suspicious activity.
However, no system is completely immune. Keep your password confidential and contact us immediately if you suspect unauthorised access. If a data breach poses a risk to you, we will notify you within 3 × 24 hours of becoming aware of it.
10. Your Rights
You have the right to:
- Access and obtain a copy of your personal data;
- Correct inaccurate data;
- Delete your data or account;
- Withdraw consent to data processing;
- Restrict or object to certain processing;
- Raise objections about how your data is handled.
You may submit requests through the contact details in section 14. We will respond within 14 business days.
11. Children's Data
The Service is intended for users aged 18 and over. We do not knowingly collect data from minors. If your invitation includes photos of children, such as for an aqiqah or child's birthday, you warrant that you have obtained permission from a parent or lawful guardian.
12. International Transfers
Invitesia is operated by Zayeen LLC, based in the United States, so your data may be processed or stored on servers outside Indonesia. In such cases, we ensure that recipients apply a level of data protection equivalent to Indonesian legal requirements.
13. Policy Changes
This policy may be updated at any time. Material changes will be announced by email or through a notice within the Service at least 7 days before taking effect. The “Last updated” date at the top of the page always identifies the current version.
14. Contact Us
For questions, data rights requests or privacy complaints:
Zayeen LLC (operator of Invitesia)
131 Continental Dr, Newark, United States