EnvvitePrivacy Policy
Last updated: July 23, 2026
This page is a plain-language description of what Envvite actually collects and does, written to match the real data flows in this product. It is not a substitute for legal advice, and the sections marked placeholder must be filled in with real business details — and this whole document reviewed by a licensed attorney against your actual user base — before you rely on it as your live privacy policy.
Who we are
Envvite is operated by Bavishni LLC, [Street Address, City, State ZIP]. You can reach us at privacy@envvite.com with any question about this policy or your data.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email address | Account signup (email/password or Google sign-in) | Identify your account, send account-related email |
| Phone number | Phone-number signup, SMS multi-factor auth, or an RSVP you submit with a phone number | Send SMS invites/codes, verify your identity |
| Event details | You create or edit an event | Display and share your invitation |
| Guest list / RSVP data | You add invitees, or someone RSVPs | Track headcounts, meal choices, and responses for the host |
| Photos | You upload an event cover image or profile photo | Display it on the invitation or your profile |
| Contacts (optional) | You choose to import device or browser contacts when inviting people | Let you pick invitees without retyping details — never uploaded without your action |
| Basic device/usage logs | Ordinary use of the app or site | Keep the service running, debug problems, prevent abuse |
Who we share it with
We use a small number of service providers to actually run Envvite. We don't sell your data.
- Google Firebase / Google Cloud — hosting, authentication, database, and file storage for the entire product. Google processes this data as our service provider, under its own data processing terms.
- Amazon SES (or your configured SMTP provider) — delivers invite and RSVP-notification emails on our behalf.
- Telnyx — delivers SMS invites and one-time verification codes.
- We may disclose information if required by law, or to protect the rights, property, or safety of Envvite, our users, or the public.
How long we keep it
We keep your account and event data for as long as your account is active. If you delete your account from the Profile screen, we delete your account profile and the lookup record used for co-host invites immediately, and remove your Firebase Auth login. Separately, an automated process anonymizes your name on any comments or guest/RSVP entries tied to your account (so a host's guest list doesn't retain your personal details after you've deleted your account), and hands hosting duties on any events you hosted to a remaining co-host where one exists.
Your choices
- Delete your account any time from Profile → Delete Account.
- Turn off SMS multi-factor auth any time from Profile, if you'd previously turned it on.
- Unsubscribe from any commercial email using the link in that email.
- Opt out of contacts import — it's a manual, one-time action per invite, not a background sync.
Your privacy rights (California and other states)
Depending on where you live, you may have rights under state privacy laws (for example, California's CCPA/CPRA, or similar laws in other states) to request access to, correction of, or deletion of your personal information, and to opt out of the sale or sharing of it. We don't sell personal information. To make a request, contact us at the address above; we'll respond consistent with the law that applies to you. [Confirm with counsel which state laws currently apply to Envvite before publishing rights language that assumes coverage — see COMPLIANCE_PLAN.md §4.]
Children's privacy
Envvite is not directed to children under 13, and account creation is not intended for anyone under 13. A host may include a child's name on a guest list they create themselves (for example, when inviting a child to a birthday party) — that information is entered by the adult host, not collected by us directly from a child. If you believe a child has provided us personal information directly, contact us and we will delete it. [This framing needs a lawyer's review given the app's kids'-party theme categories — see COMPLIANCE_PLAN.md §3.]
Cookies & tracking
This website does not currently use advertising or analytics cookies. If that changes, this section and a cookie-consent banner will be updated before any non-essential cookie is set. The Envvite app itself uses only the storage necessary to keep you signed in.
Security
We use industry-standard safeguards (encryption in transit, access-controlled infrastructure, and server-side rules that limit who can read or write any given piece of data) to protect your information. No system is perfectly secure; see our security.txt if you've found a vulnerability.
Changes to this policy
We'll update the date at the top of this page when this policy changes, and post a notice in the app for material changes.
Contact us
Questions about this policy or your data: privacy@envvite.com, Bavishni LLC, [Street Address, City, State ZIP].