Effective Date: February 16, 2026
This is the full legal version of our privacy policy. For an easier-to-read summary, see the plain-language version.
This Privacy Policy (“Policy”) describes how Open Invite (“we,” “us,” or “our”) collects, uses, and discloses information in connection with the Open Invite application and related services (collectively, the “Service”). By accessing or using the Service, you acknowledge that you have read and understood this Policy.
When you create an account, we collect the following personal information:
If you choose to authenticate via Google OAuth, we receive your name, email address, and profile photograph from Google in accordance with your Google account permissions.
In the course of using the Service, you may create and submit the following content:
When you associate a location with a plan or poll, we store the place name and geographic coordinates you provide. We utilize a third-party geocoding service (Photon, operated by Komoot) to convert place names to geographic coordinates. Your search query and, if you have granted browser-level location access, your approximate device coordinates may be transmitted to this service to improve result relevance.
We do not collect, store, or monitor your device location on a continuous or background basis. The “locate me” feature within the map view initiates a single browser geolocation request; the resulting coordinates are processed locally on your device.
We utilize Vercel Analytics to collect anonymous, aggregate page-view data (e.g., pages visited and visit frequency). This service operates without cookies, does not identify or track individual users, and does not collect personal information. We do not employ tracking pixels, advertising SDKs, or additional analytics services.
We use a single, strictly necessary authentication cookie to maintain your session. We do not use third-party cookies, tracking cookies, or advertising cookies.
We process your information for the following purposes:
We do not use your information for advertising, behavioral profiling, or sale to third parties.
We engage the following third-party service providers to operate the Service. Each provider processes data solely on our behalf and in accordance with their respective privacy policies:
The Service is designed with privacy by default. Your plans are visible only to members of circles you designate or to individuals you directly invite. Your profile information is visible to other users in accordance with your discoverability setting, which you may configure at any time in your account settings.
We do not sell, rent, or trade your personal information. We may disclose information if required to do so by law or in response to valid legal process (e.g., a subpoena or court order).
The Service is operated from the United States, and your information is stored on servers located in the United States. If you access the Service from outside the United States, including from the European Union or European Economic Area, you acknowledge that your information will be transferred to, stored in, and processed in the United States. We rely on our service providers' compliance with applicable data transfer mechanisms, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses, where applicable.
We retain your information for the duration of your account. Upon account deletion (available in Settings), we permanently and irreversibly delete all associated data, including your profile, plans, RSVPs, comments, circle memberships, and notifications.
You may exercise the following rights through the Service:
If you are located in the European Union or European Economic Area, the following applies: Our legal bases for processing your personal data are (a) performance of a contract (Article 6(1)(b) GDPR), as processing is necessary to provide the Service you have requested, and (b) legitimate interests (Article 6(1)(f) GDPR), specifically maintaining the security and integrity of the Service and analyzing aggregate usage patterns to improve the Service.
In addition to the rights listed above, you have the right to data portability (all content you have created is accessible through the application interface), the right to object to processing based on legitimate interests (Article 21 GDPR), and the right to lodge a complaint with a supervisory authority. Where processing is based on legitimate interests, we will cease processing upon your objection unless we demonstrate compelling legitimate grounds that override your interests. To exercise any rights not available through the application interface, please contact us at the address below.
If you are a California resident, the following applies: We do not sell personal information as defined under the California Consumer Privacy Act. We do not share personal information for cross-context behavioral advertising purposes. You have the right to know what personal information we collect, to request its deletion, and to opt out of any future sale of personal information. We will not discriminate against you for exercising any of these rights.
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will take steps to delete such information promptly. If you believe a child has created an account, please contact us at the address below.
We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption of data in transit and at rest, row-level database security policies, and secure authentication protocols. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
We may update this Policy from time to time to reflect changes in our practices or applicable law. The “Effective Date” at the top of this page indicates when this Policy was last revised. For material changes that affect the collection or sharing of your personal information, we will provide notice to active users through the Service prior to the changes taking effect. Your continued use of the Service after such notice constitutes acceptance of the revised Policy.
If you have questions, concerns, or requests regarding this Policy or our data practices, please contact us at: privacy@openinvite.biz