Data Deletion Request

1. Your Right to Deletion

You have the right to request that Inviterio permanently delete your personal data. This right is recognized under the GDPR (Article 17 "Right to Erasure"), UK GDPR, CCPA/CPRA, and other applicable data protection laws.

A full deletion request will result in the removal of your account, all Workspaces you own, associated events, guest lists, invitations, sub-events, RSVP responses, budget records, invitation cards, seating charts, and event page configurations.

Note: If you are a co-planner or member of another user's Workspace, deletion of your account removes you from that Workspace but does not delete the events or data owned by the Workspace owner.

2. How to Submit a Deletion Request

2.1 Account holders (hosts)

• From your account settings, navigate to Account → Privacy → "Request Data Deletion" and confirm. This is the fastest method. Your request is logged straight away and we complete it within 30 days; your account keeps working until we do, and we will email you when it is done.
• Alternatively, send an email from your account's registered email address to support@inviterio.com with the subject line "Data Deletion Request" and include your full name and account email address.

2.2 Guests (individuals who received an event invitation)

If you are a guest who received an invitation and wish to have your data removed:

• Contact the event host directly. As the data controller for guest data, the host can remove your guest record from the Service.
• If you cannot reach the host or the host does not respond within 7 days, email us at support@inviterio.com with the event name, approximate event date, your name, and the email address or phone number used for the invitation. We will assist with removal.

2.3 Third-party requests

If you are a legal representative submitting on behalf of another individual (e.g., for a deceased user or a minor), please email support@inviterio.com with proof of authorization.

3. Identity Verification

To protect against unauthorized deletion requests, we may need to verify your identity before processing. Verification may involve:

• Confirming that the request comes from the registered email address on the account.
• Asking you to confirm specific account details (e.g., workspace name or last event created).
• For third-party requests: reviewing legal authorization documentation.

4. What Happens When We Receive Your Request

4.1 When we action your request

• Your account, Workspaces, events, sub-events, guest records, invitations, budget records, blog posts, and seating charts are soft-deleted and become inaccessible to you, co-planners, and guests. Invitation magic links stop working at that point.
• Your active Business subscription (if any) is set to cancel at the end of the period you have already paid for. You are not charged again. We do not cut off access you have already paid for part-way through a month.

4.2 Permanent deletion

• Soft-deleted records are permanently purged from our production database within 30 days.
• Backup copies, when they exist, are retained only for disaster recovery. We are implementing automated backup retention with a 90-day destruction cycle; until that is fully deployed, contact us for the current status of any backup data tied to your account.
• Some records cannot be deleted outright and are anonymized instead: your account row, and any Workspace that has a payment history. Other records — your events, your guest lists, your invoices — reference these, and payment records must be kept for tax purposes. Anonymizing removes your name, email address, phone number and every other identifying field while leaving the structure those other records depend on. Nothing personal remains in them.
• Uploaded files (images, exports) are deleted along with the records that referenced them.

5. Data We May Retain After Deletion

We may retain limited data after deletion where retention is required or permitted by law:

• Billing records — transaction records related to Stripe payments may be retained for up to 7 years as required by tax and accounting regulations. These records contain minimal personal data (name, billing address, amount) and are not used for any marketing or profiling purpose.
• Security and abuse records — if your account was involved in a security incident, fraud investigation, or abuse report, we may retain minimal logs for up to 12 months to prevent re-registration or recurrence, and as required by law enforcement requests.
• Dispute resolution — if there is an active or pending legal dispute involving your account, we may retain relevant records until the dispute is resolved.

All retained data is kept only as long as strictly necessary for the permitted purpose and is not used for any other purpose.

6. Right to Object or Appeal

If we decline a deletion request (e.g., because data must be retained for legal compliance), we will explain the specific reason in writing. You may appeal our decision by replying to the response email or by contacting your local data protection authority.

7. Processing Timeframe

• We will confirm receipt of your request within 5 business days.
• We will complete identity verification and initiate deletion within 14 days of receipt (or within 30 days where permitted by law for complex requests).
• Production records are permanently purged within 30 days; any remaining backup copies are destroyed within 90 days through the normal backup-retention cycle.

8. Contact

Email: support@inviterio.com
Subject line: "Data Deletion Request — [Your Name]"