Privacy Policy

Effective October 11, 2026.

Invite Street is run by Mirren Lane LLC. It holds a few kinds of information, and no more than it needs of each.

Your account email. How you sign in, and how we reach you about your own events.
The guest names, email addresses and mobile numbers you add. Used only to address and deliver your invitations, by email or, where consent is on record, by text. Guests are never contacted for any other reason.
Your guests’ replies. Their answers go to the host who invited them. Two things a host can switch on are seen by other guests: the guest list, which shows who is coming, and the message board, where a note and the name on it are visible to anyone with the link. Meal choices, answers to your questions and contact details are never shown to other guests.
An account for guests who reply. Submitting an RSVP with an email address creates an Invite Street account for that address. There is no password: you sign in with a code we email you, and from there you can see which hosts hold your contact details and take them back.
Visits and replies. When a card is opened or a reply is sent we record that it happened, with the IP address and browser it came from, to count how many people use Invite Street and to keep it secure.
Registry links. When a guest opens a host’s registry link we count that it happened and which store it went to, nothing about who clicked. A link to Amazon carries Invite Street’s Amazon Associates tag: as an Amazon Associate, Invite Street earns from qualifying purchases, at no cost to the guest.
Email opens. Emails we send for a host carry a tiny image that tells us when the email was opened, so the host can see who has seen it.

There are no ads on Invite Street. We do not sell your data or your guests’, and we do not share it for anyone’s marketing. Guest lists belong to the host who made them.

The services that run Invite Street

We use a few companies to run the service. Each gets only what it needs to do its job for us:

Supabase stores accounts, events and guest lists.
Vercel hosts the website and counts page visits without cookies.
Resend delivers emails, and Twilio delivers text messages.
Google handles “Continue with Google” sign-in and suggests addresses as you type them. Google Analytics counts visits to our public pages (the home page, the design store, pricing and the like): which pages are viewed, how visitors arrived, and their type of device. It runs only on those pages, never on a guest’s invitation, your dashboard or anything else holding your events or guests, and we never send it names, email addresses, phone numbers or guest lists.
Stripe processes payments when a send is paid. We never see or store full card numbers.

Cookies

We use a small number of cookies: to keep you signed in, to remember a guest who has confirmed who they are on an event page, and to remember the link that first brought you to Invite Street, so we can tell which of our posts work. On our public pages, Google Analytics sets its own cookies to count visits; you can block them in your browser settings without breaking anything on Invite Street.

Children

Invite Street is not directed to children under 13, and children never get accounts or messages. A parent or host may add a child’s name to a guest list so the invitation counts them; that name is used only for that event.

Text messages

A guest is texted only when consent for that number is on record: a host confirms it on their guest list, or the guest opts in on the reply form. Invite Street stores the number, the moment and the source of that consent. Every text begins with “Invite Street”, names the host and says how to stop. Reply STOP to any text to opt out; reply HELP for help. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Keeping and removing information

Active address books and event records stay available while you use them. Verification codes expire after ten minutes. Error and email-failure logs are removed after thirty days; activity logs and event recovery snapshots after ninety days. Invitation links expire after six months, and delivery destinations and message copies are then cleared from the delivery log.

Taking your contact details back from a host clears them from that host’s lists and stored recovery copies. We keep a private record of the withdrawal to prevent those details from being added back without your permission. The information used to restore an address-book entry is kept for thirty days.

Host photos are served according to the invitation’s publication and page-visibility settings. Anyone you allow to view a photo can save a copy. Revoking access cannot remove copies someone has already saved.

Your choices

You can see and change your events and guest lists from your dashboard. To get a copy of your information, or to delete your account and everything in it, write to privacy@invitestreet.com from your account’s email address and we will do it within 30 days. A guest can take their contact details back from a host at any time from the link in any invitation email.

Changes

If we change this policy, the date at the top changes, and if the change matters to you we will tell you by email first.

Contact

Questions about your information: privacy@invitestreet.com.