Privacy
policy

InviteBird is operated by SKYPOP DESIGNS ("InviteBird," "we," "us"), a business based at 465 Braytonburne Drive, Springfield, Ohio 45503, United States. Our service is a digital invitation and event management platform available at www.invitebird.com. This policy describes what information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to hosts who create events and to guests who receive and respond to invitations.

• Account information — name, email address, password hash, and role (host, guest, co-host) when you sign up.
• Event content — event titles, dates, venues, honoree names, design prompts, polls, trivia, menus, and messages you create or upload.
• Photos and images — invitation artwork you generate or upload and photos shared to an event gallery. Guests can upload gallery photos without an account. You should upload only photos you have the right to share (see our Terms).
• Voice notes — optional audio recordings a host or guest may attach to an invitation or message. Voice notes are never required; you can skip them and you (or the host) can delete them at any time.
• Guest contact information — names, email addresses, and phone numbers that hosts provide when they add guests to an event, plus any RSVP details, meal choices, plus-one names, and messages guests submit.
• Usage and device data — pages viewed, features used, and basic device/browser information. For security and abuse prevention we log IP addresses and user-agent strings with session and activity records.
• Local storage on your device — for guest convenience we may store a display name and a randomly generated device identifier in your browser’s local storage (for example, so live quizzes and playlists remember you between rounds). These stay on your device and are not marketing identifiers.
• Payment data — handled by our payment processor (Stripe); we never store full card numbers on our servers.

• Deliver invitations, reminders, and event updates.
• Enable host-to-guest communication.
• Power creative features you choose to use — generating and editing designs, images, songs, and suggested text (see “AI features” below).
• Provide customer support and troubleshoot issues.
• Screen uploads and AI inputs with automated content-safety tools (see “AI features” below).
• Send you our own product news and offers — only if you opt in, and every such email includes an unsubscribe link.
• Improve the service, detect abuse, and prevent fraud.
• Meet legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your contact information for third-party marketing.

When a host creates an event, the host decides who to invite and what guest information to enter. For that guest list and its RSVP data, the host is the controller — the person who determines why and how the data is used — and InviteBird processes it on the host’s behalf to run the event. Hosts are responsible for having a proper basis to contact their guests.

If you are a guest and want your information corrected or removed from an event, the fastest route is to contact the host directly. You can also email support@invitebird.com and we will help — and, where appropriate, pass your request to the host. Our respective responsibilities are described in our Data Processing Addendum.

SMS opt-in is collected as a recipient-side Reply YES double opt-in. When a host adds your phone number, you receive a single confirmation text and only receive further event messages after you reply YES. Accepting this Privacy Policy does not constitute SMS opt-in, and SMS opt-in is never required to use InviteBird. See the full flow at /sms-opt-in.

InviteBird sends SMS (text messages) to guest phone numbers that hosts provide through their event dashboard. Hosts add guests they have a personal relationship with (e.g., friends, family, colleagues) and whose phone numbers the guest gave them directly for event communication.

Message types we send:

• Event invitations with a link to the RSVP page.
• RSVP reminders for guests who have not yet responded.
• Host-to-guest updates (e.g., venue changes, reminders).
• Confirmation messages after an RSVP is submitted.
• Thank-you messages from the host after the event.

Message frequency: typically 1-5 messages per event per guest. We do not send marketing or promotional content.

Opt-out: Reply STOP to any message to stop receiving SMS from InviteBird. Reply HELP for help. For questions, email info@invitebird.com. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. SMS opt-in and phone-number information are never shared with third parties for marketing.

Some InviteBird features are powered by third-party AI providers. These features run only when you use them, and only the content needed for the task is sent:

• Image generation and editing — when you generate or edit invitation artwork, your design prompts and any photos you upload for editing may be processed by OpenAI and Google Gemini.
• Text drafting and suggestions — event details, honoree names, and the text you type into assistants such as Ask InviteBird and our help concierge may be sent to Google Gemini and, via OpenRouter, to third-party models (including xAI Grok, DeepSeek, and Moonshot) to draft or refine text and answer your questions.
• Song generation and background removal — song lyrics (which may include an honoree’s name) and images used for background removal are processed by Replicate.
• Voice transcription — if you use voice input in a browser without built-in speech recognition, your recording is sent to Replicate (or to OpenAI as a fallback) to be turned into text. The audio is forwarded in memory and we do not keep a copy of the recording.
• Content safety — photos uploaded to event galleries and text submitted to AI features may be screened automatically by OpenAI’s moderation service to catch abusive material before a host reviews it.

These providers act as our service providers and process the content to return a result to us. The creative features run only when you use them, and the safety screening runs only on content someone submits. Always review AI-generated output before you send it.

We use a small number of first-party cookies that are necessary to run the service — for example, to keep you signed in and to remember an invitation-password unlock. Analytics (Google Analytics and PostHog) loads in your browser only after you accept analytics cookies in our cookie banner; your choice is stored for twelve months in a first-party cookie, and we honor the Global Privacy Control signal as a decline. Some invitation pages also embed Google Fonts and Google Maps, which load from Google’s servers. For the full list, including how to change your choice, see our Cookie Policy.

We share information only with service providers who help us run the platform. They are bound by their own privacy and security obligations and may use the information only to provide their services to us. The main providers, and what each receives, are:

• Brevo — email delivery, plus delivery and open events for the emails we send.
• Twilio — SMS delivery.
• Stripe — payment processing.
• OpenAI — image generation and editing (including host-uploaded photos and design prompts), automated content-safety checks on gallery uploads and AI text inputs, and fallback voice transcription.
• Google Gemini — image and text analysis and generation.
• OpenRouter — routing text requests to third-party models, including xAI Grok, DeepSeek, and Moonshot (event details and honoree names, for text drafting).
• Replicate — song generation (lyrics may include an honoree’s name), background removal on images, and voice transcription.
• Hetzner — hosting and infrastructure (data centers in Germany).
• Cloudflare — content delivery and security.
• Google — Analytics (consent-gated), and Fonts and Maps embeds on some invitation pages.
• PostHog — product analytics (loads in your browser only with your consent) and server-side records of operational events such as payment and delivery outcomes. PostHog processes this data in the EU (Frankfurt).

We may also disclose information if required by law, to protect the rights or safety of any person, or to enforce our Terms. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

You can exercise the following directly, without waiting on us:

• Delete your account — go to Profile → Danger zone to delete your account and its associated content. Deletion is scheduled seven days out and you can cancel it by signing back in during that window; after that, it is permanent. (For security, administrator accounts can’t self-delete; email support and we’ll handle it.)
• Download your data — export a complete copy of your account data as a JSON file from your profile.
• Unsubscribe from email — every email includes a one-click unsubscribe link that works without logging in; we add you to our suppression list.
• Opt out of SMS — reply STOP to any text.
• Change your cookie choice — reopen the cookie banner from our Cookie Policy.

You may also email support@invitebird.com to access, correct, or delete your personal information, or to ask a question about how we handle it. We honor these requests regardless of where you live and do not discriminate against you for making one.

We keep your information for as long as your account and events are active. Deleting an event removes its associated content, including uploaded files such as photos, voice notes, and songs. Deleting your account works the same way after a seven-day grace period during which you can change your mind; once the purge runs, the deletion is permanent.

Operational email and SMS logs (records that a message was sent, delivered, or replied to) are kept while the related event and account exist — they support delivery, troubleshooting, and compliance — and are deleted along with them. Backups are retained for a limited period and age out on a rolling basis, so residual copies may persist for a short time after deletion before they are overwritten.

InviteBird is operated from the United States, and our hosting infrastructure (Hetzner) is located in Germany. When you use the service, your information may be processed in the United States, Germany, and other countries where our service providers operate.

We extend the same core privacy rights — access, correction, deletion, export, and objection — to everyone, regardless of location, including protections modeled on the EU/UK GDPR. If you are in the EU or UK and believe we have not resolved your concern, you may contact your local data protection authority.

InviteBird is built for adults planning events. Accounts are intended for people aged 13 and older, and only an adult can purchase. We do not knowingly collect personal information directly from a child under 13, and we do not ask any guest their age.

We host events about children — birthdays, christenings, first communions — and we want to be precise rather than reassuring about what that means. When a host sets up a child’s party they may give us the child’s name and age and a guest list that includes other children. That information comes to us from an adult, not from a child, and we hold and use it only to run the event that adult created. The host is responsible for having the right to share the details and photos they give us.

If you are a parent or guardian and you believe your child under 13 has given us personal information directly — through an RSVP form, a photo upload, a message or a voice note — email support@invitebird.com. Tell us the event link and the name used, and we will locate the information, delete it, and confirm to you when it is gone. You can make the same request about information a host supplied about your child, and we will pass it to the host and remove it from the event.

We may update this policy. When we do, we’ll post the new version here with an updated date.

SKYPOP DESIGNS (InviteBird)
465 Braytonburne Drive, Springfield, Ohio 45503, United States
support@invitebird.com · +1 (866) 786-4090