Privacy

Effective September 24, 2026

InviteFromMe.com is run by runMast LLC ("we"), the company of its maker, David Stewart. This page explains what we store when a host uses InviteFromMe to invite guests, and when a guest replies.

What we store

From the host. The party details (name, date, time, place, address, a note, a registry link), an invitation picture if one is added, and the guest list: each guest's name and, if given, email address and mobile number. For the one-time setup test, the host's own email address and mobile number. We don't ask for the host's name, and there is no account or password.

From guests. Their answer (Going, Maybe or Can't go), how many people are coming, and any note they write for the hosts. Someone who adds themselves on a party's shared page gives their name and, if they choose, an email address or mobile number.

From an AI assistant. If a host builds their invitation with an assistant (for example ChatGPT or Claude, using our plugin or our compose link), the assistant sends us the same party details and guest list the host would have typed here, and we hand back the host's private link. The assistant cannot send invitations: the host chooses and authorizes each send on the website.

After the party. Photos guests add to the party's photo page (made smaller in their browser, which also removes the photo's location and camera details), short notes they write on its wall, and a request when someone asks a photographer for an original.

Automatically. Whether a guest has opened their invitation page, and when they replied. A random identifier for each device a host sends from, so we know it's set up; it isn't tied to a name, email or number. Our hosting provider, Cloudflare, processes standard request information such as IP addresses to deliver and protect the site, and Cloudflare Web Analytics counts page loads without cookies. We count which pages are opened, never who opened them.

On the host's own device, not with us. The host's browser keeps a list of their parties and a saved copy of each one, including its guest list, so they can start next year's party from it. That copy stays in their browser, or in any file they download, and is theirs to keep or delete.

How invitations are sent

Hosts choose how to send. Their own Mac, iPhone or iPad can send through Mail and Messages using Apple's Shortcuts app, from their own email address and phone number. Or they can choose email from InviteFromMe in any browser: Resend carries the guest's email address, subject, message and private invitation link, with replies going to the host's verified email address. We delete queued message content after the email provider accepts it or the attempt permanently stops. Delivery records, the verified reply address and per-invitation stop-email choices are deleted with the party's guest list. The lifetime allowance is 500 recipient emails per invitation, including follow-ups; unsuccessful delivery does not restore it.

How we use it

Only to run the party: to show the host their guest list and replies, to show each guest their invitation, and to prepare the messages the host sends. We only send guest emails when a host chooses and authorizes them; we never send guests marketing, we don't show ads to guests or on the pages you use to make and send invitations, and we don't sell or share personal information for anyone's marketing.

Who can see it

• The host, and anyone the host gives their private party link to, sees the whole guest list and every reply.
• A guest sees the party details and their own reply, on their own link.
• On the photo page after the party, guests see the photos the hosts let through, the wall, and each poster's first name and last initial. Never an email address or phone number. When a guest asks for an original, the photographer sees that guest's email or number so they can send it.
• Co-hosts the host shares a replies link with see names, answers, head counts and notes, but no email addresses or phone numbers.
• Anyone the host shares a party's public page with sees the party details and picture, not the guest list.
• Our service providers: Cloudflare hosts the site, its database and picture storage. Resend processes host-authorized emails under its privacy policy. They process data to provide those services.
• Address lookup: when a host asks us to find the party's address on the map, our server looks it up to show matches and put a pin on the map, using OpenStreetMap, run by the nonprofit OpenStreetMap Foundation. It happens only when the host asks, and only the address text is sent, from our server, not from your device.

Links are long and random so they can't be guessed. Anyone who has a link can use it, so keep private links private.

How long we keep it

• Guest lists, replies, notes, the picture, the address, and the photo page with its photos and wall are deleted 7 days after the party date. If we can't read the date, they're deleted 90 days after the party was last changed.
• What stays after that is the party's name, date, time, place and final counts (how many came, and so on), so the host's list of past parties still makes sense. No guest names or contact details stay.
• Message text is deleted as soon as the message is sent. Unsent messages are deleted after 7 days.
• A party that was started but never filled in is deleted after 7 days.
• The device identifier is kept so a device stays set up for future parties. It carries no personal information.

Your choices

Email safety: we retain hashed host and IP identifiers with email counts until the party is cleared and their 30-day safety window has expired, and hashed addresses blocked after a hard bounce or spam complaint to prevent further unwanted delivery. Every InviteFromMe guest email includes a link to stop emails about that invitation. Stopping email does not change your RSVP.

Guests: you can change your answer at any time from your link. To be taken off a guest list sooner, ask the host, or email us at privacy@invitefromme.com with the party's name and date, and we'll remove you.

Hosts: you can remove guests before inviting them, and you can ask us to delete a whole party at any time by emailing privacy@invitefromme.com with its private link.

Depending on where you live, you may have rights to access, correct or delete personal information about you. Email us and we'll help. Because we keep so little, and only briefly, there's often nothing left to return.

Vendors

Hosts: when you ask to see vendors (a caterer, rentals, a photo booth), we match them to your party's town or ZIP code (or another town or ZIP code you choose to look near) and size inside InviteFromMe. Vendors never get your details or your guests'. They see only a count, like "shown to 14 hosts near you this month". A vendor hears from you only if you contact them: when you tap "Contact" on a vendor, we give that vendor your name, the email and phone you choose, the party date, about how many guests and the town, plus any note you write. Never your guests' details or the address. After the party we ask whether you booked them, and we delete our copy of your contact details 90 days after the party (150 days after you contacted them, if the party has no date). If you use your voucher with a vendor, we compare your email, phone and family name with the business's; if they match, a person checks the booking before the voucher is repaid. When you describe what you're looking for, the words are read by AI run by our host, Cloudflare (Workers AI), to find vendors who fit; it isn't used to train AI, and we keep only a short summary (like "birthday cake, age 10"), not your words. If you use "Write it from my notes" when you message your guests, the same AI reads your notes to draft the message; it isn't used to train AI, and we keep neither your notes nor the draft.

Guests: when you answer through your own link or the group link, we set one small cookie on your browser. It holds a random number and is used only to notice many answers coming from one browser, which keeps the host's vendor voucher fair. It is not used to track you anywhere else. The group link may also run Cloudflare's check that the answer came from a person.

Referral links: opening a friend's referral link sets one small cookie in your browser holding their party's code, for up to 30 days, so a party you then make here counts as referred and both vouchers can double. It's cleared once your party's page picks it up, and it isn't used for anything else. To stop hosts referring themselves, we also note which browsers have opened each party's page, as a scrambled form of a random ID the app keeps in your browser (not your name, IP address or anything that identifies you): a friend's party opened on the same browser as yours doesn't count as a referral.

Vendors are the only people with accounts here. We keep what you put in your listing (business name, what you offer, area, prices, contact details, photos), your sign-in email, your second sign-in step (a passkey's public key, or an authenticator-app secret we encrypt), hashes of your backup codes, and a log of sign-ins and account changes. We keep it while you're listed, and delete your listing and photos when you ask. If you ask us to read your website, we fetch your public pages and Cloudflare's AI (Workers AI) drafts your listing from them; it isn't used to train AI, and we keep only the draft, until you save or discard it.

Vendors add a card on Stripe's own page before their listing goes live: the commission on sales, ad fees and any fees paid up front are charged to it. Stripe keeps the card, and we give Stripe your sign-in email for receipts. We keep only Stripe's reference to the card, its brand and last four digits, Stripe's fingerprint of it (the same for the same card, so we can tell when one card is on two vendor accounts; not the card number), and a record of what you owed and paid, which we keep for 7 years for tax.

Vendors we pay back when they close their account: before we pay, we ask by email for a photo ID and a W-9 tax form. We use them only to confirm who we're paying and for tax. We delete the photo ID once we've checked it, and keep the W-9 as long as tax law requires.

Messages: when you send us a message from the Help page, we keep your email address (to reply), who you said you are, and what you wrote, and delete them 180 days after we've dealt with it. To limit how many messages one connection can send, we also keep a scrambled form of your IP address with it, which doesn't identify you and is deleted with the message.

Invoices: a vendor can attach their invoice when they tell us about a sale. It may show the host's name and details. We use Cloudflare's AI to read the business, customer name, total, date and what was sold, to record the sale and check it against the introduction. We delete the file 90 days after it was sent and keep only what we read, with the sale record.

Children

InviteFromMe is for adults organizing parties. It isn't directed at children under 13, and we don't knowingly collect their personal information. A host who invites a family should use a parent's contact details.

Security

The site is served over encrypted connections, private links are long random codes, and we keep data only as long as described above. No system is perfectly secure, and a link can be forwarded, so keep private links private.

Changes and contact

If we change how we handle information, we'll update this page and its date. Questions: privacy@invitefromme.com.

See also our Terms.