Privacy policy

1. Data controller

The controller of Tinvito account data is Qubits Technologies SpA (RUT 76.837.772-3, registered address at Av. Libertador Bernardo O Higgings 4050). You can contact us about any privacy matter at soporte@tinvito.cl.

We process personal data in accordance with Chile’s Law No. 19,628 on the Protection of Private Life, as amended, including Law No. 21,719, and, when we offer the service to people in the European Union, in accordance with the General Data Protection Regulation (GDPR).

2. Organizers and guests

If you have an account (organizer), we’re the controller of your account data.

If you’re a guest, whoever invited you chose to upload your data and is responsible for it; Tinvito processes it on their behalf, solely to show you the invitation, receive your reply, and send you the event’s emails. If you’d like it corrected or deleted, you can ask whoever invited you, or write to us at soporte@tinvito.cl and we’ll arrange it.

3. What data we process

• Account: name, email, password (stored encrypted, never in readable text), language, time zone, notification preferences and, if you upload one, your profile photo.
• Events: text, dates, venue, photos, music, and other content you upload.
• Guests: name, email, or phone number if the organizer uploads them, seats, RSVP, messages, and signatures in the guestbook.
• Received invitations: if your account email is verified, we show you invitations from other organizers in which you are listed as a guest with that same email, as well as invitations you open while signed in (on the website or in the app). Only you can see this list, and you can remove any invitation from it.
• Payments (once billing is active): plan, amount, date, and payment status. Card details are received directly by the payment provider.
• Technical data: IP address, browser type, access dates, security logs, and your cookie choice.

We don’t ask for sensitive data. Please don’t enter it in the free-text fields.

4. What we use it for and on what basis

• Showing you your received invitations (matching your verified account email with the email you were invited with, and remembering invitations you open while signed in): performance of the contract. The organizer does not see this list or know whether you have an account.
• Providing the service (creating your account, publishing invitations, receiving replies, sending emails to your guests): performance of the contract you accept when you sign up.
• Account and service notices (email verification, password changes, new replies): performance of the contract; you can adjust optional notices in your account.
• Security and abuse prevention (access logs, attempt limits): legitimate interest in protecting the service and its users.
• Meeting legal obligations (accounting and tax obligations when there are payments): legal obligation.
• Tinvito news and tips: only if you authorize it; you can unsubscribe at any time.
• Non-necessary cookies and third-party content: your consent, which you can change at any time.

We don’t sell your data or use it for third-party advertising.

5. Who we share it with

Only with providers we need in order to provide the service, who process the data on our behalf and with appropriate security measures:

• website and database hosting;
• sending emails;
• payment providers (Mercado Pago, PayPal), once billing is active;
• Google Maps, only when a map is shown and you’ve allowed it.
• YouTube or Vimeo, only when an invitation shows a video and you’ve allowed it.

We may also disclose data when a competent authority requires it by law.

6. International transfers

Some providers may process data outside Chile or outside the country you’re in. When this happens, we work with providers that offer adequate safeguards (for example, standard contractual clauses or countries with a recognized level of protection).

7. How long we keep it

• Account: while it’s active. If you delete it from My details, it stops being visible immediately and we erase its data after 30 days; payments are kept without your personal data, as tax rules require.
• Events and guests: while the event exists in the account. Deleting an event removes its guests, replies, and photos.
• Bell notifications: deleted automatically after 180 days.
• Received invitations: while your account and the event exist. If you remove an invitation from the list, we only keep the fact that you removed it.
• Technical and security logs: for as long as needed to protect the service, generally no more than 12 months.
• Payment data: the period required by tax rules.

8. Your rights

You can request access, rectification, deletion, objection, portability, and blocking or restriction of the processing of your data at any time, and withdraw any consent you’ve given. You can do many of these yourself from My details and the notification preferences.

For everything else, write to us at soporte@tinvito.cl from your account’s email address. We’ll respond within the legal deadlines (generally 30 days). If you’re not satisfied, you can file a complaint with the relevant data protection authority: in Chile, the Personal Data Protection Agency; in the European Union, your country’s authority.

9. Security

We use encrypted connections (HTTPS), passwords stored with secure encryption algorithms, hard-to-guess personal links, attempt limits, and restricted access to data. No system is 100% foolproof: if an incident affecting your data were to occur, we’ll notify you and the authority when the law requires it.

10. Minors

Accounts are only for people 18 and older. Organizers can invite families with children; in that case, the data of the child is uploaded and managed by the responsible adult.

11. Cookies

We use necessary cookies and, only with your permission, third-party content. Full details are in the Cookie policy.

12. Changes to this policy

If we make a significant change to this policy, we’ll notify you by email or in your account before the change takes effect.