Privacy Policy

PeopleInvite is provided by Lexium Industries Ltd (RC 9161328), 59C I.C.E. Road, Benin City, Edo State 300102, Nigeria (“we”, “us”).

For host accounts, we are the data controller. For guest lists, the host who invites you is the controller and we process guest data on their behalf and on their instructions.

Questions or requests: privacy@peopleinvite.com.

• Account details: name, email address, password (stored only as a secure hash) and two-factor settings.
• Workspace details: workspace name, teammates and their roles, and any sending domain you add.
• Billing details: plan, payment history and the billing name and email you give. Card details are handled by Paystack; we never see or store full card numbers.
• Usage and device data: sign-in times, IP address, browser type and basic logs, used to keep your account secure.

When a host invites you, we process the details they provide and the ones you give when you reply:

• Name, email address and any fields the host adds (for example a table number).
• Your RSVP, party size and answers to the host’s questions.
• Whether an invitation was delivered, opened or clicked, so the host can see who has received it.
• Check-in time when you arrive at the event.

If you sign up through an open event link, you give these details to the host directly through our form. To see, correct or remove your details, ask the host first. If you cannot reach them, contact us and we will help.

• To provide the service: render personalised cards, send invitations and reminders, record replies and check guests in.
• To keep email deliverable and the service safe: sending limits, bounce and complaint handling, fraud and abuse prevention.
• To process payments, keep billing records and provide support.
• To send hosts service messages, such as receipts and security alerts. We send marketing only with consent, and every marketing email has an unsubscribe link.

We do not sell personal data, and we do not use guest lists for advertising or to contact guests for our own purposes.

• Contract: to provide host accounts and paid plans.
• Legitimate interests: to secure the service, prevent abuse and measure delivery, in ways people would reasonably expect.
• Consent: for optional marketing. You can withdraw it at any time.
• Legal obligation: to keep tax and accounting records.

For guest data, the host is responsible for having a lawful basis to invite you.

Invitations include a small image and tracked links so hosts can see whether an invitation was opened and its links used. Some email apps load images automatically, which may record an open. You can block this by turning off automatic image loading in your email app.

We use a small number of service providers, under contracts that require them to protect the data and use it only for us:

• Amazon Web Services (email delivery and infrastructure).
• Paystack (payment processing).
• Our hosting and database providers.

We may also disclose information if required by law, or to protect the rights and safety of our users and the public.

Some providers store or process data outside Nigeria, including in the United States and the European Union. Where we transfer personal data abroad, we rely on safeguards recognised under the NDPA and GDPR, such as adequacy decisions or standard contractual clauses.

• Host accounts: while the account is open, and deleted within 90 days of closing it.
• Guest data: kept while the host keeps the event, and deleted when the host deletes the event or closes their account.
• Billing records: kept for as long as tax law requires, usually six years.
• Security logs: kept for up to 12 months.

We use encryption in transit, hashed passwords, encrypted signing keys, access controls and two-factor authentication for staff. No system is perfectly secure; if a breach affects your data, we will tell you and the regulator as the law requires.

Subject to the law, you can ask us to:

• give you a copy of your personal data;
• correct data that is wrong;
• delete your data;
• restrict or object to how we use it;
• move your data to another service;
• withdraw consent you have given.

Email privacy@peopleinvite.com. We reply within 30 days. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC) or, in the EU or UK, to your local data protection authority.

We use only the cookies needed to keep you signed in and to protect the service. We do not use advertising or cross-site tracking cookies.

PeopleInvite accounts are for adults. Hosts may invite guests of any age, but should only give us a child’s details with a parent’s or guardian’s permission.

If we make material changes, we will update the date above and tell account owners by email before the changes take effect.