Privacy Policy

What we collect

• Purchases. Payments are processed by Stripe, which is certified PCI Service Provider Level 1 — the highest level of payment card security certification. We receive confirmation of your payment and the email address you give at checkout; we never see or store your card number.
• Your invitation. The words, names, dates, photos, films, and settings you add in the studio are stored so we can host your invitation. Until you save or publish, drafts live in your own browser’s storage, not on our servers.
• Guest RSVPs. When a guest responds to an invitation, we store what they submit — name, attendance, party size, and any optional details the host asks for (such as meal choice, a note, or an email address) — on the host’s behalf.
• Personal invitation links. If a host sends a guest their own link, we record a few moments on that link for the host, such as when it was opened and when a reply was sent. What we record, and what we never do, is set out under Personal invitation links.
• Inquiries and partner applications. When you ask about The Premiere or apply to become a partner, we collect what you type into the form: names, email, phone or WhatsApp number, wedding date and place, guest count, events, languages, your planner or business, city, website, and any message. If you arrived through a partner’s link, we also note that partner’s referral code, so we can thank them. We use this only to reply to you and, for partners, to run the referral program.
• Photographs for your film. If you commission The Premiere, the photographs you send are used only to make your film and invitation. We never publish them, your film or your invitation anywhere without your written consent.
• Usage analytics. We record simple, aggregate product events (page views, checkout steps) to understand what’s working. We do not run advertising trackers, we do not build cross-site profiles, and we do not sell data.

How we use it

• To provide the service: hosting invitations, processing payments, showing hosts their guest lists and replies, showing hosts how the personal links they sent have been received, and delivering design work for tiers that include it.
• To respond when you contact us for help.
• To improve the product, using aggregate usage data.

If you are a guest

Invitation pages are kept apart from the rest of our site and set no cookies. An invitation opened on www.lifeinvites.com cannot store anything on your device. One opened at your host’s own address, such as amara-elias.lifeinvites.com, can keep a little in your browser: a random reply number that says nothing about you, and the small notes described below. If you answer again from a shared invitation link under the same name, your new reply replaces your earlier one. A personal link, below, simply updates your reply.

Personal invitation links

A host can send each household its own link. The link greets you by name, fills in your reply and shows the seats reserved for you. When you open a personal link, we record the following for the host, so they know their invitation arrived:

• that the link was opened, and whether it came by WhatsApp, email, text, QR code or a copied link, when the host’s link says so;
• that the envelope was opened;
• how much of the film played, in quarters;
• that a reply was started, and that it was sent;
• that the registry was opened;
• the country the link was opened from, which comes from the network. We never store your IP address, city or any more precise location.

No cookies are set. At your host’s own address, the open tab remembers your personal code until you close it, and the code is taken out of the address bar. On www.lifeinvites.com, where the page cannot store anything, it reads the code from the link each time it opens, so the code stays in the address bar. Either way, anyone you pass your personal link to can answer for your household. The plain invitation link never answers as a household, even on a shared phone. Visits that look automated, such as link previews and email security scanners, are marked as such and never shown to the host as an opening. The page itself carries a short note saying the host can see these moments, with a link to this section.

Who sees it. The host, in their signed-in dashboard, and the family members or planner the host chooses to share their dashboard with. We don’t use it for anything else, and we never sell it.

Your host can switch it off. When they do, a personal link still greets you and keeps your reply with your household, but records nothing else.

Public links (an invitation link without a personal code) record nothing about you beyond the reply you choose to send.

Emails we send for hosts

Invitations by email. A host who has The Premiere or another paid invitation can ask us to email their invitation to the guests on their list, using the email addresses the host added. The email comes from “the host’s names via Life Invites”, carries the host’s own message and your personal link, and says at the bottom that we sent it for them. Replying to it reaches the host when they have given us an address for replies; otherwise the email says nothing about replying. It carries no advertising. Before the first one, the host confirms that they know these guests and that the guests expect to hear from them. A household receives at most one invitation and three reminders by email.

What we record. For each email we keep whether it was sent, delivered, bounced or marked as spam, and show that to the host. We do not track whether you open an email or click its links: there are no tracking pixels and no rewritten links.

Unsubscribing. Every invitation email has an unsubscribe link. It opens a page where one button stops emails about that wedding, and where you can also choose to stop emails from Life Invites for every wedding we help with. Many mail apps also show their own unsubscribe button, which stops emails about that wedding at once. If an address bounces permanently or a message is marked as spam, we stop emailing that address too. To remember this without keeping your address, we store only a one-way fingerprint of it, for as long as we send email.

Notifications to hosts. When a guest replies, we can email the host the reply (who answered, the answer, seats, meals, dietary notes and any note) and, on Mondays, a summary of their replies. Our studio may receive a copy of reply notifications to help hosts with their event. Hosts choose the addresses and can switch these emails off. An address other than the host's own account gets nothing until its owner confirms it through a link we email it, and every one of these emails has a link to stop them.

These emails are delivered by Resend, which receives the address, the message and the delivery events it reports back to us.

Registries and gifts

If a host adds a registry, you can tell them which gift you will give. Your name is optional (a personal link fills it in for you), and the host sees it, along with any note you add. Product pictures are copied to our own storage, so viewing the registry sends nothing to the stores. When you tap through to a store, it opens without telling the store which invitation you came from. Anything you buy there is between you and that store.

When you set a gift aside, the registry keeps a note of your own claims in your browser (under the name li_claims), so you can mark a gift bought or release it later. It holds which gifts you set aside, how many and when, whether you marked them bought, and the codes to release them, and nothing else: not your name, your note or anything about other guests. You can clear it with your browser’s site data. On www.lifeinvites.com, where an invitation page cannot store anything, it lasts only until you leave the page, and the short release code shown with your claim lets you change your mind later from any browser.

Who we share with

Only the service providers that make the product work: Stripe (payments), Vercel (hosting, storage, and content delivery), Cloudflare (database hosting for guest lists, replies and registries), Resend (delivery of the emails described under Emails we send for hosts, and of account emails such as password resets), and Web3Forms (email delivery of RSVP notifications, inquiries and partner applications to our studio inbox). Each receives only what it needs to do its job. We do not sell personal information, and we do not share it with advertisers or data brokers.

Storage and security

All traffic to our sites uses HTTPS. Guest lists are available only to the host’s signed-in account, after it has proved it owns the invitation, and, as before, with the invitation’s private access key, which we store only in hashed form. Personal links are stored as a one-way fingerprint and an encrypted copy, so our database alone does not reveal a working link. Stored content lives at unguessable addresses. No internet service can promise perfect security, but we design so that a lost link never exposes a guest list.

Retention

We keep your invitation and its guest responses for the life of the invitation, and for up to 12 months after its hosting lapses so you can bring it back. You can ask us to delete your invitation and its guest data at any time.

Some records are kept for less time:

• What happened on personal links (opened, envelope, film, reply started, registry) and the record of links the host sent: 13 months after the wedding date, or after the record was made when the invitation has no date.
• Visits marked as automated: 30 days.
• Registry gifts a guest released: 90 days after release.
• Counters that stop a link from being flooded: under two days. They use a keyed, one-way fingerprint of the network address, never the address itself.

Households, guest names, replies, registries and thank-you notes are deleted with the household, when the host deletes their guest data, or when you ask us, and in any case once the invitation’s hosting has lapsed for 12 months.

Your choices and rights

Email info@lifeinvites.com to access, correct, export, or delete personal information we hold about you. We honor applicable privacy rights — including those under the GDPR and the CCPA — for everyone, regardless of where you live. Our services are operated in the United States, and information is processed there.

Children

The service is intended for adults. We don’t knowingly collect personal information directly from children under 13. Hosts may list family guests of any age; that information is provided by and controlled by the host.

Changes

If we make material changes to this policy, we’ll post the update here with a new effective date.

Contact

info@lifeinvites.com