Privacy Policy
This policy explains what we collect when you create an invitation website with Holavite or reply to one as a guest, why we collect it and what you can ask us to do with it.
Who we are
Holavite (“we”, “us”) makes invitation websites with RSVP at holavite.com. Holavite is run by Wism Corp Ltd, 24-26 Arcadia Avenue, Fin009, London N3 2JU, United Kingdom. For any privacy question, write to hello@holavite.com.
For the information a host collects from guests (the guest list and the replies), the host decides whom to invite and what to ask, and we process it on the host’s behalf. In EU terms the host is the controller of that information and we are the processor. For everything else we are the controller.
What we collect
- Hosts (people who create a site): your email, your Etsy order number or Stripe payment reference, the event details you type (names, date, venue, schedule, dress code, gift details and so on), photos you upload, your guest list and the answers you give in the creation chat.
- Guests: what you enter when you reply: your name, whether you are coming, how many people, meal choices, a song request, a message for the wishes wall, and your email if you choose to leave one. We also record when a personal invitation link was opened, so the host can see who has seen it.
- Payments: card payments on our site are handled by Stripe. We receive the payment status, amount, email and country, never your full card number. Etsy purchases are handled by Etsy; we only see the order number you enter.
- Help chat: the messages you write and your email if you leave it.
- Usage data: the pages you view and the steps of the creation flow, with a random id kept in your browser tab, the website or campaign that brought you, your device type and your country. The country comes from Cloudflare; we do not store your IP address in our database. Our hosting provider may keep IP addresses in its logs for a short time for security.
How we use it
- To provide what you paid for: publish your site, collect replies, show them on your dashboard and email you about your site and new replies. Legal basis: performance of our contract with you.
- To send guests a confirmation of their reply and a reminder before the event, when they left an email. Every email has a link to stop reminders.
- To remind you to finish your invitation if you left your email in the creation chat but did not complete it. Every email has an unsubscribe link. Legal basis: our legitimate interest in helping you finish what you started; you can opt out at any time.
- To answer your questions in the help chat and by email.
- To understand how people use Holavite and which campaigns work, so we can improve it. Legal basis: legitimate interest; for visitors in the EU, EEA, UK and Switzerland, only with consent.
- To prevent fraud and abuse, keep the service secure and meet our tax and accounting obligations.
We do not sell your personal information and we do not share it for cross-context behavioral advertising. There are no ads on invitations.
AI features
Some parts of Holavite use AI services. Claude by Anthropic writes the greeting text of an invitation from the event details. Google Gemini paints cover art and birthday numerals from your description and, if you add one, a reference photo; it also answers questions in the help chat and helps you search for a design style.
We send these providers only what the feature needs. They process it to return a result, under API terms that do not allow them to use it to train their models. AI output can contain mistakes, so please check your invitation before you share it.
Who we share it with
We use these service providers to run Holavite. Each of them gets only the data it needs for its job:
- Cloudflare: hosting, database, file storage, bot protection (Turnstile) and privacy-friendly web analytics.
- Stripe: payments on our site. Etsy: if you bought through our Etsy shop.
- Resend: delivery of our emails.
- Anthropic and Google (Gemini): the AI features above.
- Telegram: questions from the help chat that the AI cannot answer are forwarded to our team there, with the email you left, if any.
- Google Fonts and Google Maps: fonts on our pages and the venue map on invitation sites. Your browser loads them from Google.
- Open-Meteo: the weather forecast on an invitation. The guest’s browser asks it for the venue’s town; no personal data is sent.
- YouTube or Vimeo: only if the host adds a video, and only after the guest taps play.
A host sees the replies of their own guests on their private dashboard. The invitation site itself can be opened by anyone who has its link; messages on the wishes wall appear only after the host approves them.
We may also disclose information when the law requires it, to protect our rights or users’ safety, or to a buyer of our business, who would have to respect this policy.
International transfers
Our providers process data in the United States and other countries. When data from the EU, EEA, UK or Switzerland is transferred, we rely on adequacy decisions (such as the EU–US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses.
How long we keep it
- Invitation sites, guest lists and replies: while the site is live, which is until 12 months after the event date. Then we delete them. A host can remove guests at any time and can ask us to delete the whole site earlier.
- Unfinished chat drafts and the reminder emails that follow them: until you create a site or unsubscribe, and no longer than 12 months.
- Help chat conversations: 12 months.
- Usage data: about 13 months (400 days).
- Payment and order records: as long as tax and accounting law requires, usually up to 10 years.
Your rights
Depending on where you live, you can ask us to tell you what we hold about you, give you a copy, correct it, delete it, restrict or object to how we use it, and withdraw consent you gave. In the EU, EEA and UK these are your GDPR rights, and you can also complain to your data protection authority. In California you have the right to know, delete and correct, and the right not to be discriminated against for using these rights; we do not sell or share personal information. In Mexico these are your ARCO rights, and in Brazil your rights under the LGPD.
To use any of these rights, write to hello@holavite.com. We answer within 30 days and may ask you to confirm the request from your order email or dashboard link. Guests can also ask the host directly; we will help the host answer.
Children
Holavite is for adults: you must be 18 or older to create a site. Hosts sometimes include a child’s name, for example for a birthday or a baby shower; please add only what your guests need to know. The service is not directed to children, and if you think a child has given us personal information, write to us and we will delete it.
Security
All pages are served over HTTPS and access to our systems is limited. Your dashboard link works like a password: anyone who has it can manage your site, so do not share it. If you lose it, you can get it again at Find my dashboard.
Changes
If we change this policy, we will publish the new version here with a new date. If a change is significant, we will also email hosts whose sites are live.
Contact
Questions or requests: hello@holavite.com. See also our Cookie Policy and Terms of Service.