Privacy Policy

We process the data needed to prepare and publish your invitation and to pass your guests’ replies on to you. We do not sell your data or use it for advertising; there are no advertising or tracking cookies on the site. Your card details never reach us.

BLS AI Automation DOO, Neznanih Junaka 60, Podgorica, Montenegro; registration no./PIB: 5-1333594/003 / 03784410. For any question or data protection request: hello@digitallyinvite.com.

Invitation owner (the person ordering): email address, optional phone number, language preference and the invitation content, such as names, event date and time, venue name, address and location, schedule, notes, the photos and music you upload (or the YouTube song link you choose).

Guests (RSVP): name, attendance, number of people coming, the name of any companion and which side they are from; optionally an email address, menu choice, allergy information and a note. The invitation owner can also keep their own guest list (name, optional email and phone, dietary note, private note).

Payment: Payments are handled by Dodo Payments; your card details never reach us. We receive only the payment reference, amount, payment status and the customer details Dodo Payments includes in its payment notification (such as your email address).

Waitlist: if you sign up for a design that is not live yet, your email address, the design you are interested in and your language.

Cookieless visit measurement: the page path visited, only the domain of the site you came from (e.g. instagram.com), the campaign tag (UTM), device type (phone, tablet, desktop) and language. Your IP address is not stored in this record. To tell repeat visits on the same day apart, a one-way, shortened digest (HMAC) is created from your IP address using a random salt that is generated anew each day in server memory and never written to storage. The salt is replaced when the day changes, so the digest is different for the same visitor on the next day, and because old salts are not kept, earlier digests cannot be linked back to an IP address.

Source information: when you first arrive, the channel you came from (source, medium, campaign and content tags, the referring site’s domain, time of arrival) is kept in your browser for 90 days. If you create an invitation draft, this information is saved with your order and used to understand which promotional channels work.

Technical logs: for security and troubleshooting, our server keeps standard access logs (IP address, date and time, requested address, browser information). To prevent abuse, your IP address is also counted briefly in server memory only; this counter is not stored permanently.

Correspondence: when you email us, the content of the correspondence and your contact details.

Performance of a contract (GDPR Art. 6(1)(b)): creating, saving and publishing your invitation; matching the payment to your order; sending order, payment and new-RSVP notifications by email; answering your support requests.

Legal obligation (GDPR Art. 6(1)(c)): keeping accounting and tax records; responding to lawful requests from competent authorities.

Legitimate interests (GDPR Art. 6(1)(f)): improving the site and assessing promotional channels through cookieless visit measurement and source information; security, abuse prevention and the defence of legal claims. We do this with as little data as possible and without needing to identify you. You can object to this processing.

Guest replies: when a guest fills in the RSVP form, the reply is processed to pass it on to the invitation owner and to send the guest a confirmation email (legitimate interests, GDPR Art. 6(1)(f)).

Allergy and dietary information may count as health data. This field is entirely optional; you do not have to fill it in. If you do, you share this information voluntarily; it is passed on only to the invitation owner and is not used for any other purpose. You can ask for it to be deleted at any time.

Waitlist: your consent (GDPR Art. 6(1)(a)); you can leave the list at any time.

We do not carry out automated decision-making or profiling. We do not sell data, use it for advertising or share it with third parties for marketing.

The invitation owner: guests’ RSVP replies appear in the owner’s dashboard and are sent to them by email.

Our service providers (only to provide the service, on our instructions and bound by contract):

• Server and database: our database (Supabase software) runs on a server we manage ourselves, hosted by Hostinger International Ltd. in Frankfurt, Germany (EU).

• Resend: sending transactional emails (order, payment and RSVP notifications); EU (Ireland) region.

• Hostinger: the hello@digitallyinvite.com mailbox and domain name (DNS) service.

• Dodo Payments: payment processing. As Merchant of Record, Dodo Payments processes payment data under its own privacy policy and on its own responsibility.

Google and YouTube: if the invitation owner chose a song from YouTube, it plays through YouTube’s player in privacy-enhanced mode (youtube-nocookie.com) when the invitation is opened; if you tap the map, Google Maps is loaded. In these cases your browser connects directly to Google/YouTube and their privacy policy applies. See the Cookie Policy for details.

Competent public authorities and courts, where required by law.

Our company is based in Montenegro, so your data is processed in Montenegro and in the countries where our service providers operate. Some providers, such as Resend and Dodo Payments, may be based in the United States or in other countries outside the EU/EEA.

For these transfers we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or the provider’s certification under the EU–US Data Privacy Framework. You can request a copy of these safeguards at hello@digitallyinvite.com.

Published invitations and RSVP replies: for the publication period (12 months) plus a 2-month archive period; after that they may be deleted or anonymised. You can ask for earlier deletion at any time.

Unpaid drafts: kept for as long as legally and technically necessary; deleted on request.

Payment and accounting records: for the period required by law.

Waitlist: until the design launches and we notify you, or until you leave the list.

Server access logs and cookieless visit statistics: kept for as long as legally and technically necessary; deleted on request.

Support correspondence: after your request is resolved, for as long as needed in case of a possible dispute.

You have the right to access your data; to ask for it to be corrected, erased or its processing restricted; to receive it in a structured, commonly used format (portability); and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal.

Send your request to hello@digitallyinvite.com. We may ask for additional information to verify your identity (for example, to write from the email address used for the order). We respond within one month at the latest.

If you are a guest and want your reply deleted, you can write to the invitation owner or directly to us.

You can lodge a complaint with a supervisory authority about how your data is processed: in the EU/EEA, with the data protection authority of the country where you live or work; in Montenegro, with the Agencija za zaštitu ličnih podataka i slobodan pristup informacijama; in Türkiye, with the Personal Data Protection Board (KVKK Kurulu). If you write to us first, we will try to resolve the issue together.

Data is transmitted over an encrypted connection (HTTPS) and access to the database is limited to authorised people. Your invitation edit link works like a password, so do not share it.

When we update this policy, we change the date above; we announce significant changes separately.