Privacy policy

1. Data controller

The controller of Tinvito account data is Qubits Technologies SpA. You can contact us about any privacy matter at hola@tinvito.cl.

We process personal data in accordance with Chile’s Law No. 19,628 on the Protection of Private Life, as amended, including Law No. 21,719, and, when we offer the service to people in the European Union, in accordance with the General Data Protection Regulation (GDPR).

2. Organizers and guests

If you have an account (organizer), we’re the controller of your account data.

If you’re a guest, whoever invited you chose to upload your data and is responsible for it; Tinvito processes it on their behalf, solely to show you the invitation, receive your reply, and send you the event’s emails. If you’d like it corrected or deleted, you can ask whoever invited you, or write to us at hola@tinvito.cl and we’ll arrange it.

3. What data we process

• Account: name, email, password (stored encrypted, never in readable text), language, time zone, and notification preferences.
• Events: text, dates, venue, photos, music, and other content you upload.
• Guests: name, email, or phone number if the organizer uploads them, seats, RSVP, messages, and signatures in the guestbook.
• Payments (once billing is active): plan, amount, date, and payment status. Card details are received directly by the payment provider.
• Technical data: IP address, browser type, access dates, security logs, and your cookie choice.

We don’t ask for sensitive data. Please don’t enter it in the free-text fields.

4. What we use it for and on what basis

• Providing the service (creating your account, publishing invitations, receiving replies, sending emails to your guests): performance of the contract you accept when you sign up.
• Account and service notices (email verification, password changes, new replies): performance of the contract; you can adjust optional notices in your account.
• Security and abuse prevention (access logs, attempt limits): legitimate interest in protecting the service and its users.
• Meeting legal obligations (accounting and tax obligations when there are payments): legal obligation.
• Tinvito news and tips: only if you authorize it; you can unsubscribe at any time.
• Non-necessary cookies and third-party content: your consent, which you can change at any time.

We don’t sell your data or use it for third-party advertising.

5. Who we share it with

Only with providers we need in order to provide the service, who process the data on our behalf and with appropriate security measures:

• website and database hosting;
• sending emails;
• payment providers (Mercado Pago, PayPal), once billing is active;
• Google Maps, only when a map is shown and you’ve allowed it.

We may also disclose data when a competent authority requires it by law.

6. International transfers

Some providers may process data outside Chile or outside the country you’re in. When this happens, we work with providers that offer adequate safeguards (for example, standard contractual clauses or countries with a recognized level of protection).

7. How long we keep it

• Account: while it’s active. If you ask us to delete it, we erase its data within 30 days, except what we must keep by law.
• Events and guests: while the event exists in the account. Deleting an event removes its guests, replies, and photos.
• Bell notifications: deleted automatically after 180 days.
• Technical and security logs: for as long as needed to protect the service, generally no more than 12 months.
• Payment data: the period required by tax rules.

8. Your rights

You can request access, rectification, deletion, objection, portability, and blocking or restriction of the processing of your data at any time, and withdraw any consent you’ve given. You can do many of these yourself from My details and the notification preferences.

For everything else, write to us at hola@tinvito.cl from your account’s email address. We’ll respond within the legal deadlines (generally 30 days). If you’re not satisfied, you can file a complaint with the relevant data protection authority: in Chile, the Personal Data Protection Agency; in the European Union, your country’s authority.

9. Security

We use encrypted connections (HTTPS), passwords stored with secure encryption algorithms, hard-to-guess personal links, attempt limits, and restricted access to data. No system is 100% foolproof: if an incident affecting your data were to occur, we’ll notify you and the authority when the law requires it.

10. Minors

Accounts are only for people 18 and older. Organizers can invite families with children; in that case, the data of the child is uploaded and managed by the responsible adult.

11. Cookies

We use necessary cookies and, only with your permission, third-party content. Full details are in the Cookie policy.

12. Changes to this policy

If we make a significant change to this policy, we’ll notify you by email or in your account before the change takes effect.