Privacy Policy

1. Scope

This Policy applies to information we collect from two groups of people:

• Hosts: people who create a ReelVite account to design and send invitations.
• Recipients: people who open an invitation we have delivered on a host's behalf and may submit an RSVP.

It does not apply to third-party websites or services we link to, even if you reach them from a ReelVite invitation. Those services have their own privacy practices, which we encourage you to read.

2. Information We Collect

2.1 Information you provide as a Host

• Account information: your email address, first name, last name, and a password you choose. Passwords are stored as salted hashes by our authentication provider and are not visible to us in plaintext.
• Invitation content: the text, dates, venues, music selections, image and color choices, and any other content you place into a draft or published invitation.
• Communications: messages you send us when you contact support or reply to a transactional email we send.

2.2 Information you provide as a Recipient

• Your first name, last name, email address, RSVP response (yes / no), the number of guests you indicate, and an optional note you may include with your reply.
• The IP address from which the RSVP is submitted, used for abuse prevention and basic delivery analytics.

2.3 Information collected automatically

• Server logs: IP address, user agent, requested URL, referrer, and timestamp. Logs help us operate the service, debug issues, and detect abuse.
• Cookies and similar technologies: a session cookie set by our authentication provider when you sign in, used to keep you signed in between page loads. We do not use third-party advertising cookies, behavioral tracking pixels, or session recording.
• Local storage on your device: when you use the Studio editor, drafts in progress are saved to your browser's local storage so a refresh or accidental close doesn't lose your work. That data lives on your device until you clear it.

2.4 Information from third parties

If we add sign-in providers such as Google or Apple in the future, we will receive the basic profile information those providers share with you when you authorize the connection (typically your name and email address). We will update this Policy before enabling such sign-in options.

3. How We Use Information

We use the information described above to:

• Provide, operate, and improve the Studio and the invitations we host.
• Authenticate you, keep your account secure, and prevent fraudulent or abusive activity.
• Send transactional emails such as account confirmations, password resets, RSVP confirmations to recipients, and notifications to hosts about activity on their invitations.
• Respond to your support requests and keep a record of correspondence.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your information. We do not use it to train third-party large language models. We do not serve targeted advertising based on your activity within ReelVite.

4. Legal Bases for Processing (EEA, UK, Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal information are:

• Contract: to provide the service you have requested when you create an account or submit an RSVP.
• Legitimate interests: to operate, secure, and improve the service, prevent abuse, and communicate with you about service-related matters, where those interests are not overridden by your rights.
• Consent: for any processing that requires it under applicable law, such as optional marketing communications. You may withdraw consent at any time.
• Legal obligation: where we must process information to comply with the law.

5. How We Share Information

5.1 With service providers

We use a small set of vendors to operate ReelVite. They process information on our behalf under contractual confidentiality obligations and only for the purposes we instruct:

• Supabase: authentication and database hosting (United States).
• Resend: transactional email delivery (United States).
• Replicate: AI video generation used to produce template backgrounds (United States). Recipient information and host content beyond template-design prompts are not sent to Replicate.
• Vercel: application hosting and content delivery (United States).

5.2 With Recipients

When a Host publishes an invitation and shares its link with you, the content the Host has placed into that invitation will be visible to you. When you submit an RSVP, the response, your name, your email, and any optional note will be visible to the Host who created the invitation.

5.3 With the Host

Hosts can see the RSVPs collected for their own invitations, including recipient first name, last name, email, response, guest count, and optional note. Hosts cannot see information about other Hosts' invitations or RSVPs.

5.4 For legal reasons

We may disclose information when we have a good-faith belief that disclosure is required to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of ReelVite, our users, or the public.

5.5 In a business transfer

If ReelVite is involved in a merger, acquisition, financing, or sale of assets, information about you may be transferred to the successor entity. We will notify you (for example, by email and a prominent notice on our site) before your information becomes subject to a different privacy policy.

6. Retention

• Account information: retained while your account is active. When you delete your account, we delete your account record and the invitations and RSVPs that depend on it within 30 days, subject to backups, which are purged on a rolling 35-day cycle.
• Invitations: retained as long as the Host keeps them published. A Host may delete a draft or published invitation at any time from the Studio dashboard, after which the invitation and its collected RSVPs are queued for deletion within the 30-day window described above.
• RSVPs: retained for the lifetime of the invitation they belong to. Recipients may request deletion of their RSVP at any time using the contact details below.
• Server logs: retained for up to 90 days for operations and security purposes.

7. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to fix information that is inaccurate or incomplete.
• Deletion: ask us to delete personal information about you, subject to limited legal exceptions.
• Portability: receive a copy of your information in a structured, machine-readable format.
• Objection or restriction: object to, or ask us to restrict, certain processing, including processing based on our legitimate interests.
• Withdraw consent: where we rely on consent to process your information, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Lodge a complaint: with your local data protection authority.

To exercise these rights, email privacy@reelvite.app from the address associated with your account or RSVP. We will respond within the period required by applicable law.

7.1 California residents

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA") gives you rights to know, correct, delete, and limit the use of certain sensitive personal information. We do not sell or share your personal information for cross-context behavioral advertising. You may exercise these rights through the same email address above.

7.2 Indian residents

If you are in India, the Digital Personal Data Protection Act, 2023 ("DPDP Act") gives you rights to access, correct, and erase your personal data, to grievance redressal, and to nominate a representative in case of incapacity. To exercise these rights, contact us at privacy@reelvite.app.

8. International Data Transfers

ReelVite's primary infrastructure is in the United States. If you access the service from another country, your information will be transferred to, processed, and stored in the United States. We rely on appropriate transfer mechanisms (including Standard Contractual Clauses with our service providers) for transfers from the EEA, UK, and Switzerland to the United States.

9. Children

ReelVite is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will delete it.

10. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including TLS encryption in transit, encryption at rest for our database, and access controls on our systems. No security program is perfect, however, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed by a breach of any of our safeguards.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the "Effective" date above and, if the changes are material, provide additional notice such as an in-product banner or an email to active account holders before the changes take effect.

12. Contact

If you have questions about this Policy or about how we handle your information, contact us at privacy@reelvite.app.