Privacy Policy

Last updated: 2026-07-07

1. Who We Are

Joyfully Invited is operated by OpStudio BV ("we", "us", "our"). OpStudio BV is the data controller for the personal data described in this policy.

  • Legal entity and form: OpStudio BV
  • Registered address: Schaliënhofstraat 50, 1980 Zemst, Belgium
  • Enterprise number (KBO/BCE): 1010.204.916, VAT: BE 1010.204.916
  • Country of establishment: Belgium
  • Contact: hello@joyfullyinvited.com or the contact form

Our lead supervisory authority is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

2. Scope And Our Role

This policy covers personal data processed through Joyfully Invited: host accounts, event setup, payments, guest camera access, bingo, notes, live event surfaces, host curation, downloads, and public album sharing.

For private events, we operate the service as an independent data controller. Hosts are responsible for using the service lawfully at their event, including any venue rules or guest notices they need to provide. If you are buying Joyfully Invited for a company, organisation, school, or other non-household event, contact us before use if you need a data processing agreement or a different controller/processor setup.

3. Data We Collect

We collect only the data needed to run the event experience:

  • Account data from Clerk, such as email address, name, and session identifiers for hosts and guests.
  • Payment and invoice data handled by Stripe, such as billing details, transaction metadata, invoice identifiers, and refund status. We do not store full card numbers.
  • Event configuration entered by the host, such as event name, dates, timezone, branding, guest tier, bingo content, moderation settings, wall settings, and sharing settings.
  • Guest participation data, including display name, exposure count, bingo progress, refill request status, guest notes, and uploaded photos.
  • Guest list and RSVP data provided by hosts or guests for connected events: invitee names and email addresses, party grouping, RSVP responses, plus-one counts, meal choices, and optional accessibility notes. Accessibility notes are voluntary, are used only to help the host plan the event, and can be omitted.
  • Invitation and delivery data for connected events: invitation send status, delivery and bounce events, and suppression records, plus recipient email addresses for memory capsule delivery.
  • Operational telemetry, such as upload failures, retry counts, cron health, email delivery counts, webhook logs, and storage metadata.

Photos and guest notes are event content. We process them to provide the purchased service. We do not use event photos or notes to train models or for advertising.

4. Purposes And Lawful Basis

We process personal data for these purposes:

  • Authenticate hosts and guests using Clerk. Basis: contract, Art. 6(1)(b).
  • Process purchases, invoices, cancellations, and refunds using Stripe. Basis: contract and legal obligation, Art. 6(1)(b) and (c).
  • Operate guest camera, exposure limits, bingo, notes, QR codes, thumbnails, venue wall, and host control room. Basis: contract, Art. 6(1)(b).
  • Manage guest lists, collect RSVPs, and send and track invitation and memory capsule delivery emails for connected events. Basis: contract, Art. 6(1)(b).
  • Create, curate, share, download, and email public albums. Basis: contract, Art. 6(1)(b).
  • Troubleshoot upload reliability, webhooks, cron, email, and storage health. Basis: legitimate interests in keeping the service reliable, Art. 6(1)(f).
  • Respond to support, privacy, deletion, and refund requests. Basis: contract, legitimate interests, and legal obligation where applicable.

5. Service Providers

We use established service providers to run the platform:

  • Clerk: account authentication and sessions.
  • Stripe: payments, invoicing, tax handling, refunds, and payment metadata.
  • Resend: transactional email, guest reminders, contact form mail, and album emails.
  • Railway Postgres: application database for accounts, events, guest participation, notes, operational records, and photo metadata.
  • S3-compatible object storage: event photo originals, thumbnails, and temporary ZIP exports.

Where a provider processes data outside the EU/EEA, we rely on an appropriate transfer mechanism such as Standard Contractual Clauses, an adequacy decision, or the provider's approved transfer framework.

6. Photo, Note, And Album Sharing

Photos and notes are private to the host unless the host shares a public album link. Public album links use unguessable tokens. Anyone with the link can view the curated album until access expires, the event is archived, or the host rotates the token.

Hosts control album curation. They can hide photos, favorite photos, choose which notes appear, use approve-first moderation, download single photos, and request or download ZIP exports where available.

7. Retention

Event galleries use a standard 12-month access window unless extended by a paid or support-approved option. After the access window expires, the public album link no longer serves the album and the event may be marked archived.

Photos that are reserved but never completed are reaped by a scheduled sweep after about 10 minutes. The sweep refunds the guest's exposure and attempts to delete any related temporary storage object on a best-effort basis.

Deletion of stored event photos is currently handled through support. Our object-storage lifecycle policy can expire temporary ZIP export files and transition older event files to lower-cost storage, but event photo deletion is a manual support operation unless and until we add self-service deletion.

RSVP personal data collected for connected events, such as invitee names, email addresses, RSVP responses, plus-one counts, meal choices, and accessibility notes, is scheduled for deletion 30 days after the event ends. Hosts can purge this data earlier from the guests workspace.

Payment, tax, invoice, and fraud-prevention records may be retained for the period required by law. Operational telemetry is retained only as long as needed for reliability and incident response.

8. Cookies And Local Storage

We use only strictly necessary cookies and local storage. We do not use analytics, advertising, or cross-site tracking cookies, so no cookie consent banner is required.

  • Clerk session cookies: essential cookies that keep hosts and guests signed in.
  • Stripe checkout cookies or storage: used by Stripe during payment flows.
  • IndexedDB upload recovery: essential client-side storage that lets guest photo uploads survive going offline or reloading the page.

If we introduce non-essential cookies, visitor analytics, or advertising tools, we will update this policy and add a consent mechanism beforehand.

9. Your Rights

If you are in the EU or another region with data protection rights, you may request to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • erase your data;
  • restrict or object to certain processing;
  • receive your data in a portable format.

To exercise any of these rights, email hello@joyfullyinvited.com or use the contact form. We may need information such as your account email, event link, photo ID, or support context to locate the relevant data and verify your identity.

You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

10. Minors And Sensitive Events

Joyfully Invited is intended for adult hosts and for events where camera use is lawful and appropriate. Hosts must not use the service in settings where guest photography, children's data, sensitive venues, or consent rules make the service inappropriate or unlawful.

11. Security, Changes, And Contact

We use reasonable technical and organisational measures to protect personal data and work with established infrastructure providers. No online service can guarantee absolute security. If a personal data breach is likely to affect your rights, we will act in line with our legal obligations.

We may update this policy as the product changes. Material changes will be reflected by the "Last updated" date above.

For any privacy question, email hello@joyfullyinvited.com or use the contact form.