Privacy policy
Last updated 14 October 2026
GrabInvite helps hosts create digital invitations and collect replies from their guests. This policy explains what information we collect, why, and the choices you have. We don't sell personal information, and we don't use advertising trackers.
Information we collect
From hosts (people who create invitations):
- Your email address and password (stored securely by our authentication provider) to run your account.
- What you put in your invitations: names, dates, venues, wording, schedules, contact numbers you choose to show, and any photos you upload.
- For paid plans: the payment method, transaction ID, the screenshot you upload as proof, and any note you add.
From guests (people who receive an invitation):
- When you reply: your name, whether you're attending, how many people are coming and any message you write.
- To stop spam, a one-way, salted fingerprint of your IP address is stored with the reply. We can't turn it back into your IP address.
- Your browser remembers that you've replied (in its own storage on your device) so the invitation can show your answer next time. Nothing about this is sent to us.
Cookies: we use only the cookies needed to keep hosts signed in. We don't use analytics, advertising or tracking cookies.
How we use it
- To create, display and deliver your invitations, and to show RSVPs to the host who created the invitation.
- To verify payments and activate plans.
- To send account emails such as sign-in links and password resets.
- To keep the service secure, prevent abuse and fix problems.
Who can see what
- Published invitations can be opened by anyone who has the link. They aren't listed in search engines, but please share links only with people you want to invite.
- RSVPs are visible only to the host who owns the invitation (and to our team when needed to provide support).
- Service providers process data for us under their own security and privacy terms: Supabase (database, sign-in and file storage), Vercel (website hosting) and Cloudflare (domain and DNS).
- We disclose information if the law requires it.
How long we keep it
Invitations go offline when their plan or trial ends. We keep the invitation and its RSVPs in your account so you can upgrade or look back at replies, until you delete the invitation or ask us to delete your account. Deleted invitations and their RSVPs are removed from the service. Payment records are kept as long as needed for accounting and to resolve disputes.
Your choices and rights
- Hosts can edit or delete their invitations and RSVPs at any time from the dashboard.
- Guests who want a reply removed can ask the host, or contact us.
- To see, correct or delete your information, or to delete your account, email hello@grabinvite.com.
Children
GrabInvite is meant for adults organising events. Invitations may mention children (for example a birthday), but we don't knowingly create accounts for anyone under 18.
Changes and contact
If we make significant changes we'll update this page and the date above. Questions? Email hello@grabinvite.com.