Envit – Privacy Policy

1Information We Collect

To provide a seamless, mobile-first invitation experience, we collect specific categories of data:

• Account & Profile Information: When you sign up, we collect your name, email address, and authentication credentials (processed securely via Supabase Auth).
• Event & Invitation Data: Details you input to create your digital cards, including event titles, host names, dates, times, venue locations, Google Maps links, custom descriptions, and uploaded media (such as host profile images or hero photos).
• Guest List & RSVP Data: Names, phone numbers, and RSVP statuses (attending, declined, dietary requirements) of the guests you upload or manage through your event dashboard.
• Payment & Transaction Details: Financial transactions processed on our platform are handled securely through Ziina, our trusted payment gateway partner. Envit does not store your full credit card details or sensitive financial credentials on our servers; all payment processing is governed by Ziina's secure infrastructure.
• Technical & Usage Analytics: To maintain performance and improve our services, we use tracking tools (such as PostHog) to collect anonymous usage metrics, device information, browser types, page interactions, and general referral sources.

2How We Use Your Information

We use the collected information for clear, platform-specific purposes:

• Core Platform Functionality: To generate your AI-powered digital invitations, manage guest lists, track real-time RSVPs, and render custom layouts (including Arabic RTL and English LTR views).
• Communication & Delivery: To facilitate WhatsApp-centric distribution and ensure personalized guest links function correctly.
• Payment Processing: To securely process subscription or feature upgrades via Ziina.
• Platform Optimization: To analyze user behavior, debug technical bottlenecks, and refine our AI generation models through analytics data.

4Security Measures

We implement robust administrative, technical, and physical security measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encrypting data in transit using industry-standard SSL/TLS protocols.
• Enforcing secure database access controls via Supabase row-level security (RLS).
• Relying on PCI-DSS compliant payment processing through Ziina.

5Cookies & Analytics Tracking

We utilize minimal cookies and tracking technologies (via PostHog) to understand how users navigate our platform, optimize load times, and improve mobile responsiveness. You can adjust your browser settings to refuse cookies, though certain interactive features of the platform may require them to function properly.

6Your Rights & Data Control

You maintain full ownership of your event data. At any time, you can:

• Access, update, or correct your account and event details through your dashboard.
• Request the complete deletion of your account and associated event/guest records by contacting our support team.

7Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect new platform features, regional compliance shifts, or operational updates. We will notify you of any significant changes by updating the "Effective Date" at the top of this document.