Privacy policy

Account, invitation and payment data

We use your email for your account and login links. Invitation content may include names, photos, event details, stories and gift account details you choose to share. We keep order amounts, currencies, payment status and transaction references. Xendit processes card and bank authentication details; our application does not store them.

Private drafts and public invitations

Drafts and draft photos are available only to the account owner. Publishing makes the public version, cover photo and link preview available to anyone with the link. We ask search engines not to index couple invitations. Visitors can still save content or forward a link. Pausing an invitation blocks new access but cannot remove copies already saved by others.

RSVP and messages

Guest names, attendance, party size and messages help the couple manage the event. Only the owner can view attendance records. A name and message appear publicly only with the guest’s permission and the owner’s approval. Couples must use guest data for their event and protect it from unrelated sharing or advertising.

Retention and deletion

Guest responses and customer photos are deleted when the invitation’s active period ends. Access closes at expiry; physical deletion runs on access and through scheduled jobs. Provider or scheduling failures may delay physical deletion. Export your CSV before expiry. Downloaded copies remain on the owner’s device.

Sessions last seven days, login links last 15 minutes, and login rate records are cleared after one hour. Accounts, invitation content and transaction records are retained as needed to provide the service, resolve issues and meet legal obligations. Contact support to request deletion of other data. Records legally required to be retained have restricted uses.

Providers, cookies and your choices

The application uses Vercel, PostgreSQL, Cloudflare R2, Resend, Xendit and Cloudflare Turnstile. Providers may process data outside Indonesia according to service locations and account settings. We do not sell personal data. Essential cookies support sign in, security and remembering your cookie choices for 180 days. Your display currency is stored only when you allow preferences. Change your choice through Cookie settings in the footer. Analytics and advertising are not enabled. Example drafts you edit may be stored in your browser to continue editing. The application uses an IP marker for rate limits, while infrastructure providers may keep their own security logs.

You can correct invitation content, pause publication, delete responses and export data according to your plan. Contact support for other access, correction, deletion or objection requests. We may verify account ownership. Never send passwords, one time codes or complete card details. Material policy changes will be communicated before taking effect.