Privacy Policy

1. Introduction

Welcome to Enviteo ("we," "our," or "us"), accessible at https://app.enviteo.site. We are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains in clear terms how we collect, handle, protect, and process your information when you use our web platform to create, preview, and publish digital invitations.

2. Information We Collect & Google OAuth Integration

We collect only the minimum necessary information required to operate our invitation creation and publishing service:

• User Content & Uploaded Media: Invitation text, couple/host names, event dates, timelines, venue addresses/maps, and photographs uploaded to customize invitation templates.
• Diagnostic & Technical Data: Standard browser headers, approximate IP geolocation for CDN caching, and operational logs to ensure platform stability.

3. Google API Services User Data Policy Compliance (Limited Use)

Specifically:

• We only use Google user data to provide and improve user-facing features of Enviteo (namely user authentication, workspace personalization, and account management).
• We do not transfer or share Google user data with third parties, except as strictly necessary to fulfill the core functionality of the platform (e.g. database hosting via Supabase).
• We do not use or transfer Google user data to serve advertisements, including personalized, re-targeted, or interest-based advertising.
• We do not allow humans to read Google user data unless we have obtained your affirmative agreement for specific messages/issues, it is necessary for security purposes, or it is required to comply with applicable laws.
• We do not use Google user data to train generalized artificial intelligence (AI) or machine learning (ML) models.

4. How We Use Your Information

We use your information strictly for the following legitimate purposes:

• To authenticate user sessions securely and maintain account profiles.
• To generate, render, and host your customized invitation web pages on personalized URLs (e.g. invite.enviteo.site/username/event-slug).
• To securely store draft changes in your account.
• To provide customer support and assist with email/account verifications via polyvexr@gmail.com.

5. Data Storage, Security & Infrastructure

We employ industry-standard technical and organizational security measures to protect your personal data:

• All data transmitted between your browser and our servers is encrypted using modern Transport Layer Security (HTTPS/TLS).
• User profile and invitation data is protected with PostgreSQL Row-Level Security (RLS) policies in Supabase.
• Published invitation assets and photos are stored in encrypted Cloudflare R2 object storage and distributed globally via Cloudflare CDN.
• Uploaded images in draft mode remain client-side in your browser until you explicitly decide to save or publish.

6. Sharing of Information & Public Visibility

We do NOT sell, rent, or trade your personal data or Google user data to third parties or data brokers.

Public Invitation Visibility: When you publish an invitation on Enviteo, the specific invitation details (such as event names, date, venue details, and uploaded event photos) become publicly accessible at your chosen invitation URL (https://invite.enviteo.site/username/slug). Any visitor with the link can view the invitation. You can unpublish or delete the invitation at any time.

7. Data Retention & User Deletion Rights

We retain your account data and published invitations only for as long as your account remains active or as needed to provide our services.

How to Delete Your Data:

• You can delete or modify any published invitation or draft directly from your account profile dashboard at any time.
• To request complete deletion of your account, profile data, and all associated invitations, please email us at polyvexr@gmail.com with the subject line "Account Deletion Request". Upon receiving your request, all personal data, Google user identifiers, and hosted invitations will be permanently purged within 30 days.

8. Contact Information & Email Verifications

For any privacy questions, email verification inquiries, or data access requests, please contact our designated privacy and support team: