Privacy Policy

Who we are

Vityy ("we", "us") is an invitation platform operated from Lakewood, Colorado. Contact us at support@vityy.com for any privacy request.

What we collect

• Account identifiers: email, name, optional phone number.
• Billing: Stripe customer id and subscription state (card data stays with Stripe).
• Event content you create: titles, dates, guest lists you enter, uploaded photos.
• Guest-side data: RSVP responses, optional plus-one and dietary notes submitted by invitees.
• Technical: device/browser metadata, coarse IP-derived locale, error traces.

How we use it

To run your account, deliver invitations and reminders, process payments, draft AI suggestions you request, moderate photo uploads, and improve reliability. We do not sell personal data and do not use guest lists for advertising.

Sub-processors

We share data only with vendors needed to operate the service:

• Stripe — payments and billing.
• Resend — transactional email delivery.
• Anthropic — AI copilot drafts (prompts are sent when you use the feature).
• Vercel — hosting, edge, and analytics.
• Neon — managed Postgres database.
• Vercel Blob — photo album storage.
• Google — optional OAuth sign-in.
• Sentry — error and performance monitoring.

Cookies

We set a NextAuth session cookie (next-auth.session-token) to keep you signed in, and a locale preference cookie (NEXT_LOCALE). We do not use third-party advertising cookies.

Your rights

You can request access to, export of, or deletion of your data by emailing support@vityy.com. Deletion removes your events, guest lists, and uploads within 30 days (some billing records may be retained to comply with tax law). California and EEA residents have additional rights under CCPA and GDPR respectively and may exercise them through the same email.

Children

Vityy is not intended for children under 13. We do not knowingly collect data from anyone under that age; if you believe a child has created an account, contact us and we will remove it.

Security & retention

Data is encrypted in transit and at rest by our infrastructure providers. We retain account data for as long as your account is active and delete it on request (subject to legal holds).

Changes

We will update this page when material changes occur and revise the "last updated" date above. Continued use after an update constitutes acceptance.