Sub-processors — Invitly

To operate Invitly we rely on a small number of vetted sub-processors. Each is bound by a Data Processing Agreement (DPA) and is contractually required to safeguard your data and process it only on our documented instructions. Some are conditional: they only receive data if you (or your organization) choose to enable that feature. To request a copy of our DPA, contact [email protected].

Amazon Web Services (Amazon SES)

Transactional email delivery (sign-in codes, support notifications). Processes recipient email addresses and message contents. Region: United States.

PayPal

Processing of paid global subscription payments. Processes billing and payment details for subscribers who pay via PayPal.

Wompi

Processing of paid local subscription payments in El Salvador. Processes billing and payment details for subscribers who pay via Wompi.

Cloudflare

Content delivery, DNS, and bot protection (Turnstile). Processes technical request data such as IP addresses to deliver and secure the service.

Google (Google Analytics)

Aggregate site usage analytics, only if you accept analytics cookies in the cookie banner (Google Consent Mode v2). If you decline or have not yet chosen, no Analytics cookie is set and no data is sent to Google.

HubSpot, Slack, and Zapier (optional CRM integrations)

Conditional: only engaged if an event organizer connects one of these integrations from their dashboard. When an attendee RSVPs to that organizer's event (or the organizer adds one manually) with recorded consent, the attendee's name and email are forwarded to the organizer's connected provider so they can manage attendance in their own tools. The organizer is the data controller for this data; see our Privacy Policy.

Custom SMTP provider (optional)

If you configure an alternative SMTP email provider from the dashboard, that provider acts as a sub-processor on your behalf for delivering email you trigger.