Legal

Privacy policy

Last updated 31 August 2026.

This policy explains what information InviteFox collects, why, and what you can ask us to do with it. It covers two different kinds of people: organisers, who create an account and run events, and guests, who reply to an invitation without an account.

Information organisers give us

  • Account details — your email address and authentication information, used to sign you in and to send account and event emails.
  • Event content — everything you write or generate for an event: titles, descriptions, dates, addresses, questions, artwork and uploaded images.
  • Billing details — if you subscribe to a paid plan, payment is handled by our payment processor. We receive subscription status and plan information. We do not receive or store your full card number.

Information guests give us

When a guest replies to an invitation, we store the answers they submit — typically their name, whether they are attending, party size, and any answers to questions the organiser added, which may include an email address or dietary information. Guests do not create accounts and we do not build profiles of them.

RSVP data belongs to the organiser of that event. We process it so that organiser can run their event. If you replied to an invitation and want your reply changed or removed, the fastest route is to contact the host; you can also contact us using the address below.

How we use information

  • To provide the service: publishing event pages, collecting replies, counting guests.
  • To send transactional email such as confirmations, RSVP links and account notices.
  • To generate event drafts and invitation designs when you ask for them.
  • To take payment and manage subscriptions.
  • To keep the service secure, diagnose faults and prevent abuse.

We do not sell personal information, and we do not use guest RSVP data to advertise to guests.

Service providers

We use third-party providers to run InviteFox, and they process data only to deliver their part of the service. They fall into these categories:

  • Application hosting and database, which stores your events and RSVP data.
  • Authentication, which handles organiser sign-in.
  • Email delivery, for confirmations and account email.
  • Payment processing, for subscriptions and one-off purchases.
  • AI providers, which receive the event details or prompt text needed to generate a draft or an invitation design when you request one.

Public RSVP forms are protected by Cloudflare Turnstile, which runs invisibly to tell humans from bots. Cloudflare receives technical signals such as your IP address, browser and device characteristics for that check; it does not use them to profile or advertise to you. See the Cloudflare Turnstile privacy policy.

Retention

Event content and RSVP responses are kept while your account exists, so that you can reuse and duplicate past events. Deleting an event deletes its responses. Ask us to delete your account and we will remove your events and their RSVP data, apart from records we must keep for accounting or fraud-prevention purposes.

Your choices

  • Access, correct or delete your account and event data by asking us.
  • Delete an individual RSVP response from your event's responses page at any time.
  • Unsubscribe from non-essential email. Transactional messages tied to an event you created or replied to may still be sent.

Children

InviteFox accounts are for adults. Events organised by adults often concern children — a child's birthday party, for example — and in that case the information a parent submits about their own child is stored as part of that event's RSVP data and controlled by the organiser.

Changes

If this policy changes materially we will update the date at the top of this page and, where appropriate, notify account holders by email.

Contact

Questions or requests about your data: support@invitefox.net. See also our terms of service.