Privacy Policy

What idovite collects from couples and their guests, why, who can see it, and how long we keep it.

idovite makes online wedding invitations, save the dates, RSVP tracking and a free wedding address collection tool. This policy explains what we collect, why, who can see it, and how long we keep it. It covers two groups of people: couples who create an account, and guests who open an invitation or an address link.

In short, we only collect what the invitations need. A guest's details are visible only to the couple who invited them, we never sell or share personal data for advertising, and you can export or delete your data at any time.

What we collect from couples

When you create an account we keep your name and email address, along with either a password (stored only as a secure hash) or your Google sign-in.

We also keep what you put into your invitation and save the date: your names, the date, venues, schedule, travel and registry links, and anything else you write. Your guest list holds each household's name, the number of seats you saved for them and, if you add one, their email address. For an address link, we keep the names you put on it and the note shown to guests.

When you upgrade a wedding, Stripe processes the payment. We receive the amount, the plan and whether the payment went through. We never see or store your card number.

You can start designing before you sign up. Your draft is saved on our server and linked to your browser by a cookie for up to 30 days, then deleted unless you sign in.

What we collect from guests

Guests never need an account.

When a guest replies to an invitation, we keep the answers they choose to give: whether the household is coming, how many people, dinner choices, dietary needs or allergies, a song request and a message. Dietary needs and allergies can reveal health information, so please share only what the couple needs to plan the meal.

On a save the date, a guest can say whether they can likely make it and leave a mailing address, with an email address if they like. On an address link, a guest gives the name or names for the envelope, a mailing address and, if they like, an email address. We also note when a household's invitation or save the date link was first opened in a browser, so the couple can see who has seen it.

The couple who invited you decided to send you the link and chose what to ask. They are the only people who can see your reply or your address.

Technical information

We use your IP address briefly to protect the forms from abuse, through rate limits and Cloudflare Turnstile bot checks. We do not use it to track you.

Couples get a sign-in cookie, and anyone designing without an account gets the draft cookie described above. Guest pages set no tracking cookies.

We may use privacy-friendly analytics on our public pages to learn which pages are useful. Invitation, save the date and address pages load no analytics or chat tools, so a guest's private link is never sent to them.

How we use it

We use this information only to run idovite. That means showing invitations and address forms to guests, showing replies and addresses to the couple, sending the emails the couple asks us to send, processing payments, keeping the service secure and answering support requests. We do not sell personal data, show advertising, or use guests' details to contact them for our own purposes.

Who can see it

A couple sees their own weddings, guest lists, replies and address lists, and nobody else can open them. A guest sees the invitation or address form their link opens and their own reply or address, never anyone else's.

Some companies run parts of idovite for us, under contracts that limit how they may use the data. Cloudflare provides hosting, the database, file storage, email delivery and bot protection. Stripe handles payments. Google is involved only if you choose to sign in with Google. Your data may be processed in the United States and in other countries where these providers operate.

We may also disclose information when the law requires it, for example in response to a valid court order.

How long we keep it

Drafts started without an account are deleted 30 days after the last edit.

Guests' personal details on a wedding (household names, emails, mailing addresses, replies and messages) are deleted automatically 12 months after the wedding date. If the wedding has no date, they are deleted 24 months after the wedding was last used. We remind the couple before this happens so they can export what they need.

If you unsubscribe from a couple's emails, we keep your email address on a do-not-email list, so that couple cannot email you through idovite again, even from another wedding. If an email to you bounces or is reported as spam, the address goes on the list for everyone. We keep this list for as long as idovite sends email, because deleting it would undo your choice. Contact us if you would like to be taken off it.

Address lists stay until the couple deletes an address, the whole list or their account. Your account and weddings stay until you delete them.

Payment records are kept as long as tax and accounting law requires, without your guests' details. If you delete a wedding or your account, the record stays but is no longer linked to you.

Deleted data can remain in our database's automatic recovery history for up to 30 days before it is gone for good.

Your choices

Signed-in couples can download everything we hold about them, as one file, from the Account page in their account. From the same place you can delete a single guest, an address, a whole address list, a wedding or your entire account at any time. Deleting a wedding or an account removes its guests, replies and addresses too.

Guests can change their reply, their answer on the save the date or their address from the same link at any time. To have your details removed, ask the couple who invited you, or contact us and we will help.

Depending on where you live, you may have further rights, such as to access or correct your data or to object to how it is used. Contact us and we will respond within 30 days.

Security

Every guest link is signed, so it cannot be guessed, and a couple can replace a link at any time. Invitation and address pages are kept out of search engines and do not pass their address on to other websites, and all traffic uses HTTPS. No system is perfectly secure, but we work to protect your data and will tell affected people promptly if a breach puts their data at risk.