Privacy at InviteHop

What you choose to share

Hosts provide account information and event details such as names, dates, venues, and optional contact details. Guests provide an attendee name and response, with optional email, phone, allergy information, and a message. Please share only what the host needs, especially when replying for a child. A parent or guardian should submit children’s replies.

Who can see it

Anyone with a published invitation link can see its event details, design, and the host contact details included there. Invitation pages request that search engines do not index them, but this is not a password or an access restriction.

The event’s host can see guest replies and reply privately. A guest’s personal invitation or private RSVP link lets them read their response and the host’s messages, and update their response before replies close. Anyone with either link can access the linked reply, so keep those links private. Other guests are not shown your RSVP details without one of these links.

How information is used

InviteHop uses this information to save invitations, collect and manage replies, provide account access, and operate the service. If email notifications are enabled, the supplied address is used for RSVP confirmations and messages about that response. Transactional email previews omit allergy details, guest notes, and the text of private host replies.

Security controls may use a hashed identifier derived from a network address to limit abusive requests. Hosting and authentication services also process technical request and security logs.

Service providers and optional features

Cloudflare hosts the application and Supabase provides account, database and artwork storage services. Resend is used for application email when configured. AI drafts and artwork, when enabled, send the description you enter to OpenAI; avoid including private guest information in descriptions. Generated images are also sent to OpenAI for safety checks before they can be displayed or stored in your account. Images that fail or cannot complete these checks are discarded by InviteHop. Accepted artwork becomes visible to anyone with its image link while it appears on a published invitation. You can create an invitation manually without using AI.

Printing opens Walgreens’ website. You choose whether to upload the downloaded design there. Walgreens handles its own customer information, payment, and order process under its policies.

Browser storage and your choices

InviteHop uses browser storage for drafts, recovery of AI requests and appearance preferences, and cookies for account sessions and remembering a guest’s response. Clearing that storage can remove unsaved drafts and the remembered reply on that device; a saved private RSVP link still works.

AI wording and draft results are retained privately to recover interrupted requests. Recovery is available for up to 24 hours. Expired result content is removed during later AI requests or administrative cleanup. Generation records and model usage counts are retained to enforce allowances and review service costs; the usage report does not include your description or invitation text.

Hosts can delete events and their associated guest replies from the event dashboard. Removing artwork from a draft or deleting an event does not erase the stored image or its generation record. Its public image link stops working once no published invitation uses it; copies already downloaded may remain. Guests can correct their response with the private RSVP link while replies are open, or contact the host about corrections and removal. Provider backups and security logs may persist according to each provider’s retention practices.

For questions about an invitation or your reply, contact the event’s host using the information on the invitation.