Privacy Policy

March 14, 2026

1. Information We Collect

Account Information

When you create an InvitePass account, we collect your email address, full name, and account type (customer or merchant).

Merchant Information

If you register as a merchant, we additionally collect your business name, business category, and optionally your business logo.

Transaction Data

We collect data related to loyalty transactions, including points issued, stamps collected, rewards redeemed, and point transfers between users. Transfer records include the email addresses of both participants.

Device Information

We collect your device locale to display content in your preferred language. We access your camera solely for scanning QR codes—no images are stored.

2. How We Use Your Information

We use the information we collect to:

  • Authenticate your identity and manage your account
  • Operate loyalty programs, issue points, and process rewards
  • Facilitate point transfers between users
  • Display content in your preferred language based on your device locale
  • Display merchant branding (business name, logo, category) to customers

3. Data Sharing & Disclosure

Transfers: When you transfer points to another user, your email address is visible to the recipient and vice versa.

No data sales: We do not sell, rent, or trade your personal information to third parties.

No advertising SDKs: The InvitePass mobile apps contain no advertising SDKs or third-party trackers.

Website analytics: The InvitePass website uses Plausible Analytics (cookie-free, privacy-focused) and Vercel Analytics. These do not track you across sites and do not collect personal information.

4. Data Storage & Security

All data is stored on Supabase, our sole infrastructure provider. Data is protected by Row Level Security (RLS) policies ensuring users can only access their own data. All data in transit is encrypted via HTTPS.

5. Your Rights & Choices

  • Account deletion: You can delete your account at any time from within the app. This permanently removes all your data.
  • Data export: You can request a copy of your data by emailing hello@invitepass.app .
  • Analytics opt-out: Website visitors can opt out of Plausible and Vercel Analytics by enabling "Do Not Track" in their browser.

6. GDPR Rights (EEA Users)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your personal data.
  • Restriction: Request restriction of processing your data.
  • Portability: Request your data in a structured, machine-readable format.
  • Object: Object to processing of your data for certain purposes.

Legal basis: We process your data based on contractual necessity (providing the service you signed up for) and legitimate interest (improving and securing our service).

To exercise these rights, contact us at hello@invitepass.app .

7. CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the CCPA:

  • Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to delete: Request deletion of your personal information.
  • Right to opt-out of sale: We do not sell personal information, so this right is not applicable.
  • Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at hello@invitepass.app .

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed from our systems.

9. Children's Privacy

InvitePass is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of InvitePass after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@invitepass.app .