Last updated: 5 April 2026
Invited (“we”, “us”, “our”) is operated by Emma-Jane Gordon, trading as Invited, based in England. We take your privacy seriously. This policy explains what personal data we collect, why we collect it, and your rights under UK GDPR.
Data controller: Emma-Jane Gordon (trading as Invited)
Contact: privacy@rsvpd.io
Website: rsvpd.io
If you have any questions about this policy or how we handle your data, email us at the address above.
| Data | Why | Basis |
|---|---|---|
| Email address | Account creation, sign-in codes, event invitations | Contract |
| Name | Displaying your identity to event hosts and guests | Contract |
| Phone number | Enabling phone sharing with other users, with your consent | Consent |
| Event data you create | Providing the Invited service | Contract |
| RSVP responses | Enabling hosts to manage their events | Contract |
| Device / browser type | Security, bug fixing | Legitimate interests |
| Usage data | Improving the product | Legitimate interests |
We do not collect payment information. We do not sell your data.
Your phone number is private by default. If another user requests to share phone numbers with you, you will receive a notification and must explicitly accept before either party's number is exchanged. We never share your phone number without your active consent to a specific request.
You can remove your phone number from your profile at any time in account settings.
We use a small number of trusted third-party services to run Invited:
All third parties are required to handle your data in line with UK GDPR. We do not share your data with advertisers or data brokers.
The Ideas tab on Invited may include suggestions for venues, experiences, and products. Some of these links are affiliate links, meaning we may earn a small commission if you make a purchase through them, at no extra cost to you. All affiliate content is clearly labelled within the app.
| Data | Retention |
|---|---|
| Your account and profile | Until you delete your account |
| Events you hosted | Until you delete them, or 12 months after the event date |
| RSVPs | Until the event is deleted |
| Server logs | 90 days |
When you delete your account, your personal data is deleted within 30 days, except where we are required to retain it by law.
Under UK GDPR, you have the right to:
To exercise any of these rights, email privacy@rsvpd.io. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113.
Invited uses cookies and browser local storage for:
We do not use third-party advertising cookies. If we add analytics, we will update this policy and obtain consent where required.
We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and secure credential management via Supabase. If you believe your account has been compromised, contact us immediately at privacy@rsvpd.io.
We may update this policy from time to time. We will notify you of material changes by email or via a notice in the app. The “last updated” date at the top will always reflect the current version.