Privacy Policy

Last updated: 20 October 2026

InviteM ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, in compliance with the General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws.

Who we are

InviteM is operated by I.M. INVITEM LIMITED, a private company registered in Cyprus under registration number HE 406259 (incorporated 21 January 2020), with its registered office at 44 Kyriakou Matsi, Athineon Court, Floor 2, Office 202, 1082 Nicosia, Cyprus. I.M. INVITEM LIMITED is the data controller for personal data processed through the platform. Privacy questions and data requests: support@invitem.eu.

1. Information We Collect

Information You Provide

  • Account information: name, email address, phone number, profile photo
  • Payment information: processed securely through third-party payment providers (we do not store full card details)
  • Booking details: events attended, venues visited, preferences
  • Communications: messages sent through the platform, support inquiries
  • Referral information: referral codes, referred user data

Information Collected Automatically

  • Device information: browser type, operating system, device identifiers
  • Usage data: pages visited, features used, time spent on the platform
  • Location data: approximate location based on IP address (with your consent)
  • Log data: access times, referring URLs, crash reports
  • Analytics, only if you allow it in Cookie settings: Google Analytics 4 receives page addresses and technical data such as browser type. We do not send your name, email, phone number or payment details. See our Cookie Policy.

2. How We Use Your Information

We use your information to:

  • Provide, operate, and improve our services
  • Process transactions and send booking confirmations
  • Send notifications about your account, bookings, and platform updates
  • Personalize your experience and recommend relevant events
  • Prevent fraud and ensure platform security
  • Comply with legal obligations
  • Process referral program rewards

We process your personal data based on:

  • Contract performance: processing necessary to fulfill your bookings and provide services
  • Legitimate interests: improving our platform, preventing fraud, and marketing
  • Consent: where you have given explicit consent (for example marketing emails, or Google Analytics if you allow analytics cookies)
  • Legal obligation: compliance with tax, accounting, and regulatory requirements

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers: payment processors, hosting providers, and Google Analytics 4 when you have allowed analytics cookies
  • Event organizers: attendee information necessary to fulfill bookings (name, email, ticket details)
  • Legal authorities: when required by law or to protect our rights
  • Business transfers: in connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain certain data for up to 7 years to comply with legal and tax obligations. Analytics data is anonymized after 26 months.

6. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (TLS) and at rest
  • Regular security audits and penetration testing
  • Access controls and authentication measures
  • Supabase Row Level Security (RLS) policies for database protection

7. Your Rights (GDPR)

You have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate or incomplete data
  • Erasure: request deletion of your personal data ("right to be forgotten"). Step-by-step instructions: Delete your account.
  • Portability: receive your data in a machine-readable format
  • Restriction: request limitation on how we process your data
  • Objection: object to processing based on legitimate interests
  • Withdraw consent: withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at support@invitem.eu. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside Cyprus. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected data from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Platform. Your continued use after changes constitutes acceptance.

11. Data Protection Officer

For data protection inquiries, contact our DPO at support@invitem.eu.

12. Complaints

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy).

Explore InviteM