Privacy Policy

01Information we process

We only process the information needed to create your invitations and deliver them to your guests:

• Account information — your name, email address, language preference, an optional phone number, and your password, which is stored only as a secure hash.
• Event information — the details you enter for your event, such as names, dates, venue and wording, and any images, music or files you upload.
• Guest information you provide — your guests' names, WhatsApp numbers, the number of seats on each invitation and any notes you add.
• Responses and activity — whether a guest accepted or declined, when a message was delivered, when an invitation was viewed or its QR code scanned, and door check-ins. We record these without storing guests' IP addresses.
• Payment information — purchases are handled by our payment provider. We never see or store full card numbers.

02How we use it

We use this information to:

• deliver the invitations you send and show each guest their personal invitation and QR code;
• collect RSVPs and show them to you in your dashboard;
• run your account — sign-in, password resets, security and support;
• keep INVTRA reliable and protect it against abuse such as spam.

We do not sell personal information. We never use guest phone numbers for marketing, and we never message a guest about anything other than the invitation you sent them.

03WhatsApp and other service providers

Invitations are delivered through the WhatsApp Business Platform operated by Meta Platforms, which processes guests' phone numbers and message content in order to deliver each message. Meta's own terms and privacy policy apply to WhatsApp itself.

We also rely on carefully chosen providers for hosting, databases, file storage, email and payments. They process data only on our behalf and only to provide their service to us.

04Cookies

We use two cookies, and only two: a session cookie that keeps you signed in, and a language cookie that remembers whether you prefer Arabic or English. We do not use advertising or third-party tracking cookies.

05Retention and deletion

You stay in control of your data:

• You can delete an event at any time. Deleted events — including guest lists, responses and uploaded files — are permanently purged after 30 days.
• You can delete your account from your account settings, which removes your account and all of your events.
• Password reset links expire after one hour.

We may keep limited records where the law requires it, for example records of payments.

06Security

All traffic to INVTRA is encrypted in transit. Passwords are stored only as salted hashes, never in readable form. Each guest reaches their invitation through a unique, randomly generated link, and your dashboard is accessible only from your account.

07Your responsibility as a host

You provide your guests' details to us. By sending invitations, you confirm that you know each guest, that you are genuinely inviting them, and that they would expect to hear from you about your event.

08If you received an invitation

Your name and number were added by the host who invited you. If you would like your details corrected or removed, ask the host or write to us at hello@invtra.store and we will help.

09Your rights

You can ask to access, correct, export or delete your personal information. Most of this you can do yourself from your dashboard and settings; for anything else, contact us and we will respond promptly.

10Changes to this policy

If we make meaningful changes, we will update this page and, where appropriate, let account holders know by email.