Privacy Policy
Last updated: 26 October 2026
1. Who we are
Convitto (Brazilian company number CNPJ 60.609.904/0001-40) is a digital invitation platform with RSVP and gift lists. We are the controller of your account data and of how you use the service. This policy follows Brazil's LGPD (Law 13.709/2018) and, for people in the European Union, the European Economic Area, the United Kingdom and Switzerland, the GDPR and UK GDPR.
Privacy contact: contato@convitto.com.br.
2. Data we process
| When | Data |
|---|---|
| You create an account | E-mail, password (stored only as a hash), name and ID from Google or Facebook if you sign in with them, chosen country, phone number if you turn on WhatsApp alerts. |
| You create an event | Name, date, place, texts, photos, music link, gift list, Pix key (Brazil only). |
| Guests | Name, e-mail and phone the host enters; RSVP, companions, chosen gifts, check-in, and WhatsApp and e-mail delivery status. |
| Messages | Guest replies received by WhatsApp, and what you write to support or in feedback. |
| You buy | Order, amount and credits. Card details are handled by the payment provider; we do not store them. |
| You use the service | IP address of your last login, browser and device, pages and actions, errors, session recordings (text fields masked) and push notification identifiers. Usage metrics and recordings only with your consent where the law requires it. |
| You use AI | Texts, photos and search terms you provide to generate images and invitations. |
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Provide the account, invitations, RSVP and gift list | Contract (GDPR art. 6(1)(b); LGPD art. 7, V) |
| Send invitations and notices by WhatsApp, e-mail and push | Contract; for guests, the host’s instructions |
| Process payments and credits | Contract and legal obligation |
| Security, fraud prevention and new-login alerts | Legitimate interests |
| Usage metrics, error reports and session recordings | Consent in the EU, UK and Switzerland; legitimate interests in Brazil |
| Measure whether Google ads led to sign-ups and purchases | Consent in the EU, UK and Switzerland; legitimate interests in Brazil |
| News and promotional e-mails | Consent, which you can withdraw at any time |
| Comply with the law and answer authorities | Legal obligation |
We make no automated decisions with legal effect on you. AI generates content at your request; it does not profile people.
4. Guest data
When you, the host, add guests, you decide whom to invite and through which channels. For that data you are the controller and Convitto acts as processor: we process it only to send invitations, receive replies and show the list to you. We do not use guest data for advertising or send it to AI providers.
Invitation e-mails include a link to stop receiving them and record opens and clicks (an image and signed links) so we can measure the service. People who unsubscribe get no more invitations.
If you are a guest and want your data corrected or deleted, write to the host or to us. We will answer or pass the request on.
5. Who receives it
We do not sell personal data. We share it only with providers that run the service under contract, and with authorities when the law requires.
| Provider | What for | Where |
|---|---|---|
| Our server (VPS) | Servers, database and uploaded files | Brazil |
| PostHog | Metrics, errors and session recordings, through our subdomain t.convitto.com.br | Abroad (US) |
| Google sign-in, Google Ads tag, YouTube music search, map links | Abroad | |
| Meta | WhatsApp Business Platform and Facebook sign-in | Abroad |
| OneSignal | Push notifications and e-mails | Abroad (US) |
| InfinitePay, RevenueCat, Apple and Google Play | Payments and in-app purchases | Brazil and abroad |
| OpenRouter, Replicate, Freepik, OpenAI and Voyage AI | Generate invitations and images, remove backgrounds and search designs | Abroad |
| Mapbox | Addresses and maps for the event place | Abroad |
| Zyte | Read the product page behind a link you paste into the gift list | Abroad |
| Cloudflare Turnstile | Bot check on supplier forms | Abroad |
| ip-api.com | Approximate city from the IP address, in the new-login alert | Abroad |
Guests see the event information you publish.
6. International transfers
Our servers, database and files are on a VPS in Brazil. Several providers above are abroad; when personal data leaves your country we rely on the safeguards the law allows, such as the standard contractual clauses these providers offer. If you are in the EU, the UK or Switzerland, your data is transferred to Brazil and, through our providers, to the United States. We do not yet have a representative in the EU or the UK: contact us using the details above.
7. How long we keep it
- Event, guests, replies and event files: deleted automatically about 5 days after the event date.
- Account and other data: until you delete the account. Accounts without access for over 1 year may be deleted.
- Deleting your account removes your events, guests and files. Only aggregate counts remain, identifying no one.
- Cookie choice: 180 days.
- Metrics and recordings in PostHog: while useful to the product; you can ask for deletion.
- Payment providers keep their own records as the law requires.
8. Your rights
At any time you can ask for:
- confirmation of processing and access to your data;
- correction of incomplete or outdated data;
- deletion, anonymisation or blocking of unnecessary data;
- portability;
- information on who we share data with;
- objection to processing based on legitimate interests, and restriction of processing (GDPR);
- withdrawal of consent, without affecting what was done before.
Write to contato@convitto.com.br. We answer within 15 days. You can delete your account yourself in the app settings or on the account deletion page. To change your cookie choice, use the button on the Cookie Policy.
If you are not satisfied, you can complain to Brazil’s ANPD (gov.br/anpd), to the data protection authority of your country in Europe, or to the ICO in the United Kingdom.
9. Cookies
We use cookies and browser storage. See the list and how to change your choice in the Cookie Policy.
10. Security
We use encrypted connections (HTTPS), hashed passwords, per-account access control and alerts for logins from a new address. No system is fully secure; if an incident affects you, we will tell you as the law requires.
11. Children
Convitto is for people aged 18 and over. By adding children’s names to an event, the host declares having their guardians’ permission.
12. Changes to this policy
If something important changes, we will tell you by e-mail or in the app and update the date at the top.