Last updated 8 August 2026

Privacy Policy

Written to be read, not to be scrolled past. If anything here is unclear, we will fix the wording.

This website is currently a static demonstration It runs entirely in your browser on GitHub Pages. It does not process real payments, does not run a database, and does not permanently store any information you type or upload. Everything below describes both what happens today and what will change when the hosted version launches.

1. Who this policy covers

This policy applies to the InviteHub website and, in future, to invitations created and hosted through it. It covers two kinds of people: hosts, who create invitations, and guests, who open a link somebody sent them.

2. What happens today (static demonstration)

In the current build there is no server that belongs to InviteHub. Nothing you enter is transmitted to us, because there is nowhere for it to go.

Information kept in your own browser

  • Your invitation draft — names, dates, venue, message and settings, saved in localStorage under the key invitehub:draft.
  • Your favourites — the list of templates you have hearted, under invitehub:favorites.
  • Your theme choice — light or dark, under invitehub:theme.

This data never leaves your device. It is visible only to you, in this browser, on this computer or phone. Clearing your browser storage — or pressing Start over in the editor — deletes it permanently and immediately.

Photographs you select

When you choose a photo in the editor it is read locally with the browser's FileReader, resized on your own device to keep it manageable, and shown in the preview. It is not uploaded, not copied and not sent anywhere. Closing the tab without saving discards it.

Cookies and tracking

This site sets no cookies at all. There is no analytics script, no advertising pixel, no session tracker and no third-party tag manager. We do not know who you are, how many of you there are, or which pages you looked at.

Third-party requests

Two external requests happen when you load a page, and it is only fair to name them:

  • Google Fonts serves the DM Sans, Playfair Display and Great Vibes typefaces. Loading a font sends your IP address and browser details to Google, as any request to any server does. If you would rather avoid this entirely, the fonts can be self-hosted in the fonts/ folder — see the project README.
  • GitHub Pages hosts the site and keeps standard web server logs.

Share buttons do not silently contact WhatsApp, Facebook or Telegram. They only build a link, and nothing is sent until you click one and the platform's own page opens.

3. What will change in the hosted version

When accounts, storage and payments arrive, the following will apply. We are stating it now so there are no surprises later.

Information hosts will provide

  • Account details: name and email address, used to sign in and to recover your invitations.
  • Invitation content: everything you type into the editor plus the images you upload.
  • Payment records: the hosting plan purchased (₹99), the amount and the transaction reference.

Information about guests

If you enable RSVP, the names and responses your guests submit are stored against your invitation and shown only to you. Guest lists belong to the host who collected them. We will not sell, rent, share or mine them.

Payments

Payments will be handled by Razorpay, a PCI-DSS compliant payment provider. Your card number, CVV and UPI PIN go directly to them and are never seen, transmitted or stored by InviteHub. We only receive a confirmation that a payment succeeded.

Storage and deletion

Invitation data and images will be held by Supabase. When you remove an invitation, the invitation is retired and the uploaded images are deleted. You can also delete an invitation yourself at any time, and deleting your account removes everything associated with it.

4. Children

InviteHub is intended for adults organising events. Accounts are not offered to children under thirteen. Invitations frequently feature children — a first birthday, a naming ceremony — and the adult host is responsible for having the right to share those photographs.

5. Your rights

Under Indian data protection law and comparable regulations elsewhere, you may request access to your data, correction of anything inaccurate, deletion of your account and content, and a copy of what you have submitted. In this build every one of these is already satisfied by clearing your own browser storage, because that is the only place your data exists.

6. Security

The site is served over HTTPS. The hosted version will use encrypted storage, hashed credentials and access controls that restrict every invitation to its own owner. No system is perfectly secure, and we would rather say so than imply otherwise.

7. Changes to this policy

Material changes — particularly the shift from this static build to the hosted version — will be reflected here with a new date at the top of the page. Continuing to use the service after a change means you accept the revised policy.

8. Contact

Questions about privacy can go to privacy@invitehub.example.com. These are placeholder details for the demonstration build.