Privacy policy

What this policy covers

This policy covers our website, the invitation pages we make and the reply (RSVP) form on them.

The person who orders an invitation (the host) decides about the guest list: whom to invite and which questions to ask. We handle guests' details only on the host's instructions and only to provide the invitation.

What we collect

• From the host: what the invitation shows — names, date, venue, programme and texts, uploaded photos and music; messages with us about the order.
• The guest list (given by the host): how each guest is addressed, number of seats, language, group and optionally a phone number. The phone is only used to send the guest their personal link.
• From the reply form: whether you will attend, your name and whatever else the form asks — number of people, guests' names, menu choice, a message, a phone or email.
• On a personal link we note when you first opened the invitation, so the host knows it arrived.

Cookies, statistics and technical data

• We use no advertising or tracking cookies and no third-party analytics or ad scripts.
• Only when you reply through the shared link, one cookie is kept in your browser so you can change your reply later. It lasts one year.
• Statistics are daily totals only (for example, how many times an invitation was opened). Nothing about who you are — IP, cookie, device — is stored.
• Your IP address is kept briefly, only to protect the site against spam and repeated attempts, and is normally deleted within a day.
• Our hosting provider may keep technical server logs (IP address, time of request) for a short time under its own rules.

What we use it for

• To show the invitation and greet each guest by name.
• To pass the replies to the host: in the admin panel, as an Excel/CSV file or through a read-only results link.
• To protect the site against spam and attacks.
• To contact you about your order.

We do not sell your data, do not use it for advertising and do not pass it to anyone except the service providers named below.

Who can see it

• Your reply is seen only by the host, the family they share the results link with, and the DIP | Rəqəmsal Dəvətnamə team. Other guests cannot see it.
• Whoever the host sends the invitation link to can open it. Personal guest links never appear in search engines; the shared invitation is not indexed either unless the host allows it.

Where it is stored and how it is protected

• The database and files are at Supabase and the website at Vercel; both run on servers in Ireland (European Union). They store the data only on our behalf.
• Every connection is encrypted with HTTPS; the database connection uses verified TLS.
• Photos and music are kept in private storage; the original files are never served publicly.
• Personal guest links are random and cannot be guessed. The admin panel is protected with two-step verification.
• Guest links close automatically at 20:00 on the day of the event.

How long we keep it

Invitations, guest lists and replies are kept for as long as the service needs them. When the host asks, we permanently delete the invitation, guest list, replies, photos and music within 30 days.

Your rights

Under the Law of the Republic of Azerbaijan “On Personal Data” you may ask what we hold about you, have it corrected or deleted, and object to its processing.

Guests can change their reply through the same link while it is open. To have a reply deleted, write to the host or to us. We answer requests within 30 days.

Children

Our service is for adults: invitations to children's events are ordered by their parents. We do not collect data directly from children.

Changes

We may update this policy. The date of the last change is shown at the top of the page.