Privacy Policy

This policy describes how INVYRA handles information when you use the website, organiser dashboard, invitation pages, RSVP forms, check-in tools, and related services. It is not a certification of any specific regulation.

Information we collect

• Account details: name, email, organisation, and password (stored as a hash).
• Event details: titles, dates, venues, themes, posters, and custom questions.
• Guest details provided by hosts or guests: names, contact details, RSVP answers, dietary notes.
• For children's or overnight events, parent/guardian names, consent records, and emergency notes entered by authorised users.
• Technical data needed to operate the service: session cookies, IP address as seen by the server, and basic request logs.

Why we collect it

To create and manage events, send invitations, collect RSVPs, issue reservation passes, support check-in, and provide organiser tools. We do not sell guest lists.

How information is used

Hosts see guest information for events they own. Guests see only the public event details needed to RSVP. Parent/guardian, consent, medical, and emergency fields are restricted to authorised hosts and are not shown on public invitation pages.

Storage and retention

Data is stored in the database configured by the operator (typically MongoDB Atlas). Retention follows the operator's policy. Hosts may delete events they own, which removes associated guests and reservations.

Third-party services

Depending on deployment, the operator may use hosting providers, a MongoDB database, font or image CDNs, and optional email or SMS providers. Those providers process data under their own terms.

Cookies

See the Cookie Policy. Essential session cookies are required to keep organisers signed in.

Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information. Hosts can update their profile and event records in the dashboard. Guests should contact the event host, or the operator using the contact details on the Contact page.

Children

INVYRA can be used for children's events. Public pages must not display unnecessary child information. Consent and emergency details are for authorised hosts only. Hosts are responsible for collecting only what they need and for obtaining appropriate guardian permission.

Contact

Use the Contact page. Do not send passwords or copies of identity documents through public forms.