Legal

Privacy Policy

Last updated: 6 August 2026

1. Who we are

Forever Invites (“we”, “us”, “our”) provides a digital wedding invitation platform. If you have any questions about this policy, contact us at our contact page.

2. Data we collect

When you use Forever Invites we may collect:

  • Account information — your email address, provided via Clerk authentication.
  • Wedding details — names, date, venue, and invitation content you enter.
  • Guest data — guest names, email addresses, and RSVP responses you upload or receive.
  • Payment information — handled entirely by our payment processor; we store only the payment confirmation and timestamp.
  • Usage data — page views and interaction logs for product improvement.
  • Contact enquiries — name, email, and message submitted through our contact form.

3. How we use your data

We use the data we collect to:

  • Provide and operate the invitation platform.
  • Process your payment and activate your invitation.
  • Send transactional emails (account confirmation, RSVP notifications).
  • Respond to support and contact enquiries.
  • Improve our product and fix issues.

We do not sell your personal data to third parties, and we do not use it for advertising.

4. Data sharing

We share data only with the sub-processors necessary to operate the service:

  • Supabase — database hosting (EU region).
  • Clerk — authentication and user management.
  • Stripe / payment processor — payment processing.
  • Vercel — application hosting.

5. Cookies

We use strictly necessary cookies for authentication sessions. We do not use tracking or advertising cookies. If that changes we will update this policy and ask for your consent.

6. Data retention

Your account data is retained while your account is active. Wedding invitation data is retained until 3 months after your wedding date, after which it is automatically deleted. You may request deletion at any time by contacting us.

7. Your rights

Under applicable data protection law (including the GDPR where it applies) you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing.
  • Data portability.

To exercise any of these rights, contact us via our contact page. We will respond within 30 days.

8. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (TLS) and access controls. No system is completely secure; please contact us immediately if you suspect a breach.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the date at the top of this page. Your continued use of the service after changes constitutes acceptance.