EnvvitePrivacy Policy
Last updated: July 23, 2026
This page is a plain-language description of what Envvite actually collects and does, written to match the real data flows in this product. It is not a substitute for legal advice, and the sections marked placeholder must be filled in with real business details — and this whole document reviewed by a licensed attorney against your actual user base — before you rely on it as your live privacy policy.
Who we are
Envvite is operated by Bavishni LLC. You can reach us at privacy@envvite.com with any question about this policy or your data.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email address | Account signup (email/password or Google sign-in) | Identify your account, send account-related email |
| Phone number | Phone-number signup, SMS multi-factor auth, or an RSVP you submit with a phone number | Send SMS invites/codes, verify your identity |
| Event details | You create or edit an event | Display and share your invitation |
| Guest list / RSVP data | You add invitees, or someone RSVPs | Track headcounts, meal choices, and responses for the host |
| Photos | You upload an event cover image or profile photo | Display it on the invitation or your profile |
| Contacts (optional) | You choose to import device or browser contacts when inviting people | Let you pick invitees without retyping details — never uploaded without your action |
| Basic device/usage logs | Ordinary use of the app or site | Keep the service running, debug problems, prevent abuse |
| Subscription/purchase status | You subscribe to Premium or Pro | Unlock paid features. Apple/Google collect your card directly — we only receive a purchase receipt and plan status via RevenueCat, never your card number |
Who we share it with
We do not sell personal information, and we do not disclose personal information to third parties for their own independent marketing purposes. We disclose it only to the service providers below, who process it on our behalf to run Envvite, and as otherwise described on this page (legal process, business transfers). A platform like Envvite necessarily relies on infrastructure, delivery, and billing vendors to function — the list below is the complete, current set of who those are.
- Google Firebase / Google Cloud — hosting, authentication, database, and file storage for the entire product. Google processes this data as our service provider, under its own data processing terms.
- Amazon SES (or your configured SMTP provider) — delivers invite and RSVP-notification emails on our behalf.
- Telnyx and/or Twilio — deliver SMS invites, reminders, and one-time verification codes; which one is used depends on the recipient's country.
- Apple App Store / Google Play, via RevenueCat — bill and collect payment for Premium/Pro subscriptions directly; Envvite never receives or stores your card number, only a purchase receipt and your plan status via RevenueCat, our subscription-management provider.
- We may disclose information if required by law, or to protect the rights, property, or safety of Envvite, our users, or the public.
If a host adds you to a guest list, the host — not Envvite — is responsible for having the right to give us your contact details and for who they choose to invite; see our Terms of Service for the certification every host makes when sending invitations.
Text messages (SMS)
Envvite sends SMS text messages for three purposes: event invitations with an RSVP link (when a host adds a guest by phone number instead of email), one-time verification codes for phone-number signup, login, and optional SMS two-factor authentication, and event reminder texts to guests who RSVP'd yes. Message frequency varies with your activity — typically a handful of messages around an event you host or attend, plus a verification code at signup or login. Message and data rates may apply. Reply STOP to any Envvite text to opt out of future messages, or HELP for support. See our SMS/Text Messaging Terms for full detail, including how consent and opt-out differ for guests added by a host versus your own account.
No mobile phone number or SMS opt-in/consent data is shared with any third party for marketing or promotional purposes. This category of information is excluded from the general service-provider sharing described above — it is passed only to whichever SMS delivery provider (Telnyx or Twilio) is actually sending the message on our behalf, solely to deliver that message, and never for that provider's own marketing use.
How long we keep it
We keep your account and event data for as long as your account is active. If you delete your account from the Profile screen, we delete your account profile and the lookup record used for co-host invites immediately, and remove your Firebase Auth login. Separately, an automated process anonymizes your name on any comments or guest/RSVP entries tied to your account (so a host's guest list doesn't retain your personal details after you've deleted your account), and hands hosting duties on any events you hosted to a remaining co-host where one exists. See our Data Retention Policy for the full breakdown.
Your choices
- Delete your account any time from Profile → Delete Account.
- Turn off SMS multi-factor auth any time from Profile, if you'd previously turned it on.
- Unsubscribe from any commercial email using the link in that email.
- Opt out of SMS any time by replying STOP to any Envvite text — see our SMS/Text Messaging Terms.
- Cancel a Premium/Pro subscription any time through the App Store's or Google Play's own subscription settings on your device.
- Opt out of contacts import — it's a manual, one-time action per invite, not a background sync.
Your privacy rights (California and other states)
Depending on where you live, you may have rights under state privacy laws (for example, California's CCPA/CPRA, or similar laws in other states) to request access to, correction of, or deletion of your personal information, and to opt out of the sale or sharing of it. We don't sell personal information. To make a request, contact us at privacy@envvite.com; we'll respond consistent with the law that applies to you. [Confirm with counsel which state laws currently apply to Envvite before publishing rights language that assumes coverage — see COMPLIANCE_PLAN.md §4.]
Children's privacy
Envvite is not directed to children under 13, and account creation is not intended for anyone under 13. A host may include a child's name on a guest list they create themselves (for example, when inviting a child to a birthday party) — that information is entered by the adult host, not collected by us directly from a child. If you believe a child has provided us personal information directly, contact us and we will delete it. See our Child Safety Policy for more detail, including how to report a concern. [This framing needs a lawyer's review given the app's kids'-party theme categories — see COMPLIANCE_PLAN.md §3.]
Cookies & tracking
This website does not currently use advertising or analytics cookies. If that changes, this section and a cookie-consent banner will be updated before any non-essential cookie is set. The Envvite app itself uses only the storage necessary to keep you signed in. See our Cookie Policy for the full breakdown.
Security
We use industry-standard safeguards (encryption in transit, access-controlled infrastructure, and server-side rules that limit who can read or write any given piece of data) to protect your information. No system is perfectly secure; see our security.txt if you've found a vulnerability.
Changes to this policy
We'll update the date at the top of this page when this policy changes, and post a notice in the app for material changes.
Contact us
Questions about this policy or your data: privacy@envvite.com.