1. What this page is
Inviterio is a service provided by Strivewin LLC (Indiana, United States). We use a small number of third-party services ("sub-processors") to deliver the Service. This page lists every one of them, what personal data each receives, and where that data is stored. We publish it so that hosts acting as data controllers can meet their own transparency obligations, and so that guests can see exactly who touches their information.
If a service is not on this list, we do not send it your data.
2. Current sub-processors
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| DigitalOcean, LLC | Application hosting and database | All data held in the Service, including guest lists | United States (New York) |
| Cloudflare, Inc. | Content delivery, DNS, and security filtering for our website and API; object storage (R2) for uploaded images, exports, and generated files | Because our traffic is routed through Cloudflare, it processes every request made to the Service in transit — which includes any personal data contained in that request, such as guest names, email addresses, phone numbers and RSVP responses as they are submitted or displayed. It also holds the images and files uploaded by hosts or generated by the Service, and connection metadata such as IP addresses. | Cloudflare's global network. Unlike our application and database, Cloudflare's processing is not pinned to a single region — a request is handled by whichever of its data centres is nearest. |
| Brevo (Sendinblue SAS) | Sending transactional email (invitations, reminders, confirmations) | Guest name, email address, and the content of the message being sent | European Union / United States |
| Twilio Inc. | Sending and receiving SMS, including STOP/START handling | Guest phone number and the content of the message being sent | United States |
| Stripe, Inc. | Payment processing | Account holder billing details only. No guest data. Card details are entered on Stripe's own hosted page and never reach our servers. | United States |
| Functional Software, Inc. (Sentry) | Error monitoring and diagnostics | Technical error data. Personal data is not sent by configuration, though it may appear incidentally in diagnostic information. | United States |
| Google LLC | Venue address lookup when a host searches for a location | Only the venue search text typed by the host. No guest data is ever sent to Google, and your guests' browsers do not contact Google when viewing an event page. | United States |
3. Where your data is stored
The Service is stored in the United States. This applies to every account regardless of where the host or their guests are located: a host in Berlin does not cause their guest list to be stored in Germany. Our application server and our database — which hold every guest name, email address, phone number and RSVP response — are located in New York.
Two qualifications are worth stating plainly, because "stored in the United States" is not the whole picture:
- Traffic is processed at Cloudflare's nearest data centre. Requests to our website and API pass through Cloudflare before reaching our servers, and Cloudflare decrypts and inspects them in order to deliver and filter that traffic. This processing happens wherever the visitor is — a guest opening an invitation in Frankfurt is served from a data centre near Frankfurt. The data is not stored there, but it is processed there in transit.
- Uploaded images and generated files are held in Cloudflare R2, which stores objects across Cloudflare's global network rather than in a single named region.
Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on the EU-US Data Privacy Framework where the receiving organisation is certified under it, and on Standard Contractual Clauses as a fallback. Contact support@inviterio.com for details, including our Data Processing Agreement.
4. Changes to this list
We will update this page before adding a new sub-processor that processes personal data. Hosts who have entered into a Data Processing Agreement with us may object to a new sub-processor as set out in that agreement.
5. Contact
Questions about this list: support@inviterio.com.
Effective:
Questions about this policy?