Comprehensive Privacy Policy

1. Identity and Address of the Data Controller

"Invitto", hereinafter "The Controller", located in Mexico, is responsible for collecting your personal data, the use given to them, and their protection.

2. Personal Data Collected

To carry out the purposes described in this policy, The Controller will collect and process the following personal data:

• Identification data: Full name.
• Contact data: Email address, phone number.
• Tax data (if billing is required): Tax ID, fiscal address.
• Asset or financial data: Information related to payments, which is securely processed through payment gateways (e.g., Stripe), so The Controller does not directly store credit or debit card numbers.

Sensitive data: We inform you that The Controller does not collect or process sensitive personal data (such as racial origin, religious beliefs, sexual preference, etc.).

3. Purposes of Data Processing

The personal data we collect from you will be used for the following purposes that are necessary for the service you request:

• Create and identify your user account in the "Invitto" application.
• Provide the services and products you have requested.
• Process transactions, service purchases, and invoice generation.
• Provide technical support and customer service.
• Compliance with applicable legal obligations.

Additionally, we will use your personal information for the following secondary purposes that are not strictly necessary for the requested service, but allow us to provide better service:

• Sending newsletters, advertising, and promotions about our services.
• Statistical, analytical, and application improvement purposes.
• Measuring the effectiveness of our advertising and showing our ads to people who visited our site, only if you accept measurement and advertising cookies (section 6).

If you do not want your personal data used for these secondary purposes, you can indicate this by sending an email to hola@invitto.app.

4. Personal Data Transfer

We inform you that your personal data may be shared within and outside the country with the following third parties, for the purposes described:

• Payment gateway providers (Stripe): For the secure processing of your transactions.
• Cloud and infrastructure service providers: For platform hosting and data storage.
• Meta Platforms, Inc. and its affiliates (Facebook and Instagram): To measure our advertising and build audiences of people who visited the site, only if you accept measurement and advertising cookies.
• Competent authorities: When required by judicial or regulatory mandate.

By accepting this privacy policy, you consent to the transfer of your data for the purposes established herein.

5. ARCO Rights (Access, Rectification, Cancellation, and Opposition)

You have the right to know what personal data we have about you, what we use it for, and the conditions of its use (Access). Likewise, it is your right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); that we delete it from our records or databases when you consider it is not being used properly (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition).

To exercise any of the ARCO rights, you must submit the respective request via:

• Email: hola@invitto.app

Your request must contain: full name, document proving your identity, and a clear and precise description of the personal data regarding which you seek to exercise any of the ARCO rights. The response time will not exceed 20 business days.

6. Use of Cookies and Tracking Technologies

We inform you that on our website/application we use cookies and other technologies, through which it is possible to monitor your behavior as an internet user, as well as provide a better service and experience when browsing our page. The personal data we collect through these technologies will be used for basic application functionality (authentication), traffic analysis and, only if you accept, measuring our advertising.

Measurement and advertising cookies (Meta). Only if you accept them in the cookie notice shown when you visit the site, we load the Meta Pixel. Meta may place cookies such as _fbp, _fbc and fr in your browser, and receives:

• the addresses of the public pages and account dashboard pages you visit on Invitto, and the page you came from;
• technical data about your device and browser, such as language, screen size and IP address;
• the actions you take while creating your invitation, for example viewing a template, starting an invitation or publishing it.

Meta may associate this information with your Facebook or Instagram account, if you have one, and processes it under its own terms and data policy.

What we do not send to Meta: your name, your email address, your phone number, your guests' data, the content of your invitations, and private guest or collaborator-invitation links. The invitations your guests receive and the sign-in and sign-up pages do not load the Pixel. In your account dashboard, each page address includes your invitation's technical identifier, not your name.

How to withdraw your consent: you can change your decision at any time with the “Cookie preferences” link at the bottom of the site's public pages; from that moment we stop sending data to Meta. To delete cookies that already exist, use your browser settings. You can also adjust your ad preferences in your Facebook or Instagram account, or exercise your right of opposition under section 5.

7. Privacy Policy Modifications

This privacy policy may undergo modifications, changes, or updates derived from new legal requirements; from our own needs for the products or services we offer; from our privacy practices; or for other causes.

We are committed to keeping you informed about changes this privacy policy may undergo through our website in the "Privacy Policy" section.