Privacy Policy
Last Updated: June 2026
At Invitly, protecting your personal data is our priority. This Privacy Policy explains how we collect, use, and share your information in compliance with applicable laws, including the California Consumer Privacy Act (CCPA) and the legal framework for data protection and electronic commerce in El Salvador.
1. Information We Collect
We collect information you provide directly to us (such as your email address when using our magic-link authentication) and data related to the events you create or manage on our platform. We also automatically collect certain technical data (such as IP addresses and browser types) and use cookies to enhance your experience.
2. How We Use Your Information
Your data is used to provide, maintain, and improve our services, manage your account, generate calendar links, and communicate with you. We do not sell your personal information to third parties.
3. Information Sharing and Disclosure
We may share your information with trusted third-party service providers who assist us in operating our platform, provided they agree to maintain the confidentiality of your data. We may also disclose information if required by law or to protect our rights.
4. International Data Transfers
Your information may be stored and processed in the United States, El Salvador, or other countries where our service providers operate. By using Invitly, you consent to this transfer.
5. Your Privacy Rights
Depending on your jurisdiction, you have specific rights regarding your personal data. Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to access, delete, and opt-out of the sharing of their data, as well as limit the use of sensitive personal information. Under the laws of El Salvador, including the constitutional right to Habeas Data, users have the right to access, rectify, cancel, and oppose (ARCO rights) the processing of their personal information. To exercise any of these rights, please contact our Data Protection Officer at [email protected].
6. Data Security and Retention
We implement robust, industry-standard security measures to protect your data against unauthorized access. We retain your data only for as long as necessary to fulfill the purposes outlined in this policy.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page.
8. AI and Machine Learning Data Usage
We respect your data sovereignty. Invitly does not use your personal data, event details, or guest lists to train public or proprietary Artificial Intelligence (AI) or Large Language Models (LLMs) without your explicit opt-in consent. Any automated processing is strictly limited to delivering the core functionality of our service, such as calendar link generation and spam detection.