Privacy policy
The short version
We collect what we need to run your wedding planning and your guests' invitation, RSVP, and guest-site experience. We never sell personal information. A small number of specialist providers (payments, hosting, email, analytics, support chat, maps, and music search) process data on our behalf, each for a specific purpose set out below.
1. Who this policy covers
OpenInvite is used by two kinds of people: couples (account holders who plan a wedding and pay for the service) and guests (people a couple invites, who interact with the couple's published wedding website, RSVP form, and related pages; guests do not create an OpenInvite account).
2. What we collect
From couples (account holders)
- Account information: name, email address, and authentication credentials (sign-up/login is handled by our backend platform, Base44, including an optional "continue with Google" option)
- Wedding details: wedding date, venue and location details, ceremony/reception information, theme and styling choices, and other planning content you choose to store
- Payment information: OpenInvite is a one-time-purchase product (Pro or Ultra plan). Payments are processed by Stripe; we do not receive or store your full card number. Stripe shares with us the information needed to confirm your purchase (email, plan, amount, transaction status)
- Content you create: guest lists, budget and vendor notes, seating plans, checklists, vows/speech drafts, moodboard images, and messages you send through the platform
- AI assistant conversations: when you use Ava or another in-app AI assistant, your prompts and the relevant wedding context you're asking about are processed to generate a response
- Usage data: pages visited and features used, collected via analytics (see section 6)
From guests
A couple may add or import the following about their guests, and a guest may submit some of it directly through the published wedding site:
- Name, email address, phone number, and postal address (if provided for invitations)
- RSVP responses, per-event attendance, and any plus-one details
- Meal preference and dietary requirements
- Notes to the couple and song requests
- Photos uploaded to a shared wedding gallery, where the couple has enabled this
Guests do not create an OpenInvite account. Access to a guest's own RSVP page is by a private link unique to that guest.
3. How we use this data
- To provide, operate, and maintain the OpenInvite platform for couples and their guests
- To power AI planning assistance: the assistant uses your own wedding context to give relevant suggestions
- To process payments and confirm plan purchases
- To send service emails: invitations and RSVP links to guests on a couple's behalf, account and receipt emails to couples, and (where enabled) marketing/product emails you can opt out of
- To respond to support requests
- To detect and prevent fraud, spam, and abuse (including automated-bot checks on public forms)
- To understand product usage in aggregate, so we can improve features
We do not sell personal information. We do not use guest data for advertising.
4. AI features
Ava and the platform's other AI assistants are provided through our backend platform, Base44's, AI processing capability. When you use an AI feature, your message and the relevant wedding context needed to answer it are sent for processing and a response is returned.
- AI suggestions are assistive only: never professional legal, medical, financial, or cultural advice
- You remain responsible for all final content, decisions, and communications
- Verify any cultural, religious, or safety-relevant suggestions independently
5. Guest data: the couple's responsibilities
When a couple stores or imports their guests' personal information in OpenInvite, the couple is the data controller and OpenInvite is the data processor for that guest data.
- The couple is responsible for having a lawful basis to collect and store their guests' information
- The couple should let guests know their details are being stored for wedding coordination purposes
- Guest data is linked to the couple's account and is deleted when that account is deleted
- Couples should avoid storing sensitive information (e.g. detailed medical records) beyond what's needed for event planning, such as a dietary requirement
6. Cookies and analytics
We use a small number of cookies and similar browser-storage technologies to keep you logged in, remember a guest wedding site's password unlock for the session, and, where you consent, understand product usage. Full detail, including exactly which technologies are used and how to control them, is in our Cookie policy.
7. Third-party services
We use the following specialist providers to run OpenInvite. Each processes only what it needs for its specific purpose, and each has its own privacy policy governing how it handles data on our behalf.
| Service | What it receives | Purpose |
|---|---|---|
| Base44 | All account, wedding, guest, RSVP, and photo data: our backend database and application platform | Hosts and processes all product data; also provides AI processing and file storage |
| Vercel | Hosting infrastructure, request logs | Hosts the website and serverless functions |
| Resend | Guest and couple email addresses, names, wedding details, RSVP links | Sends invitation, RSVP-link, and account emails |
| Stripe | Couple's email, payment method, plan and price details | Processes one-time plan payments; manages the billing portal |
| PostHog | Couple's email and name (once logged in), pages visited, feature usage | Product analytics, so we can see what to improve |
| Sentry | Error reports and, for a sample of sessions, a masked session replay | Error monitoring, to find and fix bugs |
| Cloudinary | No personal data: hosts static marketing images only | Serves images on our public marketing pages |
| Google Places | Venue and vendor search terms a couple types | Powers venue/vendor location search and suggestions |
| Spotify | Couple's Spotify profile (display name, photo) and song search terms | Music playlist and song-request features |
| Cloudflare Turnstile | Client IP address, a bot-detection challenge token | Confirms a human is submitting public forms (RSVP-link requests, sign-up) |
8. Data storage and security
Product data is stored via Base44's infrastructure and is encrypted in transit (TLS). We follow reasonable, industry-standard security practices to protect your information and respond promptly to any identified vulnerability.
If you discover a security issue, please contact us at hello@openinvite.com.au.
9. Data retention
- Active accounts: data is kept for as long as the account is active
- Deleted accounts: account and associated guest data is removed within 30 days of a verified deletion request
- Backups: backup copies are purged within 90 days of deletion
- Legal and financial records: some transaction records may be retained longer where required by law
10. Your rights
OpenInvite is an Australian business and this policy is written with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in mind. If you are a couple with an OpenInvite account, or a guest whose information a couple has stored, you can ask us to:
- Access: request a copy of the personal information we hold about you
- Correct: update or correct inaccurate information
- Delete: delete an account and its associated data, or a specific guest's data on request to the couple who added it
- Ask questions: about how your information is being handled
To exercise any of these rights, contact us at customercare@openinvite.com.au, or see our data deletion page for account and data removal requests. If you are unsatisfied with our response, Australian residents may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
11. Changes to this policy
We may update this policy from time to time. We'll update the "last updated" date above, and where a change is material we'll also notify account holders by email or in-app notice.
12. Contact us
Email: hello@openinvite.com.au
Support: customercare@openinvite.com.au
Website: openinvite.com.au/contact