Privacy, in plain words.

Your account and draft

An account includes your name, email and the information needed to sign in and verify your address. Your password is handled by the authentication system and is not displayed in your workspace.

A saved invitation contains the details you choose: names, date, times, venues, text, language, a photo and optional music. The account draft is available after sign-in. If you choose to save on this device, the browser also keeps a local copy until it is replaced or cleared.

What someone with the link can see

Publishing creates the version intended for your guests. Anyone with the link or QR code can open and forward it: a published invitation does not require a guest account or password.

Invitation pages ask search engines not to index them. This does not make the link secret or guarantee that someone cannot copy your content. Publish only photos, addresses and text you want to share with this audience.

You can unpublish from your workspace. Invayra then stops serving the link and its media; this does not remove copies or screenshots made by other people.

Your guests’ replies

A reply includes the entered name, attendance, numbers of adults and children and, if the guest chooses, selected events, a meal request, a message and a song suggestion.

Replies appear in the invitation owner’s workspace, where they can be exported as CSV. They are not displayed on the public link. Their content is processed so the couple can plan their celebration.

Free-text fields are optional. Avoid entering a diagnosis, medical document or other sensitive information. You may prefer to contact the couple directly about an allergy or personal matter.

Payments, requests and outside services

When PayPal is enabled, payment takes place on its pages. Invayra keeps order and transaction references, amount, currency and payment status to activate the service and reconcile payment events. The application does not collect your card number or PayPal password.

A recorded withdrawal request includes the account, purchase reference, statement, optional reason, request status and timestamp. Its history is separate from the invitation: deleting a draft does not erase this receipt. The final retention rules must specify its duration.

WhatsApp and external website links open when you choose them. Those services apply their own rules. The final hosting, email and payment provider list, processing locations and transfer arrangements must be confirmed before the service opens.

Cookies and storage on your device

Session cookies keep you signed in and protect account access; the configured session lasts seven days. When you reply, a signed cookie helps prevent abuse and has a maximum lifetime of one year.

Your browser may keep your draft, preferences and a receipt for retrieving your own reply. The receipt stores editing identifiers, not your reply text. Clearing browser data can remove this local information and your access to edit the reply.

The current version does not install an advertising pixel or third-party audience analytics. Any future addition must be explained and accompanied by the necessary choices before activation. Music is optional and starts when you choose.

After twelve months

The twelve months of hosting begin with the first publication. At expiry, the invitation link and its media are no longer publicly available.

Link expiry does not mean all account data, replies and payment references are automatically erased. Exact retention periods, backups and deletion procedures must be confirmed in the final policy before launch.

Your choices and requests

The owner can edit a draft, choose what to publish, withdraw the link and export collected replies. A guest can edit their own reply from the browser holding its receipt.

To ask for information, correction, access or deletion, use the official contact on this page once available. Requests will be handled under the rules applicable to your situation, with proportionate identity checks. The current version does not provide self-service account deletion.