As used throughout this Privacy Policy, the following terms have the meanings set forth below:
Nohmit Incorporated (operating as "Invitrr") is the data controller for Personal Information collected through the Service. We are incorporated under the laws of Ontario, Canada, with our registered office located in Ottawa, Ontario, Canada.
For all privacy-related inquiries, requests to exercise your rights, questions about this policy, or concerns about our data practices, you may contact us by email at privacy@invitrr.com. For general support inquiries, contact support@invitrr.com. For legal matters, contact legal@invitrr.com. For safety concerns, contact safety@invitrr.com.
We endeavor to respond to all privacy-related inquiries within the timeframe required by applicable law. We reserve the right to request reasonable identifying information before processing any request.
This Privacy Policy applies to all individuals who access or use the Service, regardless of their location, including without limitation users of our mobile application, visitors to our website, hosts of events on our platform, and any person who otherwise interacts with Invitrr in connection with the Service (collectively, "Users").
By downloading, installing, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and consent to the collection, use, disclosure, and Processing of your Personal Information as described herein. If you do not agree to this Privacy Policy, you must not access or use the Service.
This Privacy Policy is incorporated by reference into and forms a part of our Terms of Service. Capitalized terms not defined herein have the meanings ascribed to them in our Terms of Service.
This Privacy Policy does not apply to third-party websites, applications, or services that may be linked to or from the Service. We encourage you to review the privacy policies of any third-party services you choose to access.
Users in certain jurisdictions — including the European Economic Area ("EEA"), the United Kingdom ("UK"), Canada, and the State of California — may have additional rights as described in Section 13 of this Privacy Policy. Those provisions supplement and do not replace the general provisions of this policy.
We collect a broad range of information in connection with the Service. The categories of information we collect are described below. This list is illustrative and not exhaustive. We reserve the right to collect any additional categories of information consistent with our legitimate business purposes and applicable law.
We collect information that you voluntarily provide to us when you create an account, use the Service, contact us, or otherwise interact with us. This includes:
When you access or use the Service, we and our third-party partners automatically collect certain technical and behavioral information. This automatic collection occurs through a variety of technologies including software development kits ("SDKs"), cookies, pixel tags, log files, and similar tracking mechanisms. The information we collect automatically includes, without limitation:
We may receive information about you from third parties, including without limitation:
We may derive new information about you by analyzing and combining the information we collect as described above. This derived information may include inferences about your interests, preferences, behavioral patterns, likely responses to particular content or events, and other characteristics. Derived information is used for the same purposes as the underlying information from which it was derived and may be used to improve and develop our products and services, including machine learning systems.
We use the information we collect for a wide range of purposes that are consistent with operating, maintaining, improving, and growing our business. The purposes for which we may use your information include, without limitation, the following:
For users located in the European Economic Area ("EEA") or the United Kingdom ("UK"), the General Data Protection Regulation ("GDPR") and applicable UK data protection law require us to identify the legal basis on which we rely when Processing your Personal Information. The table below sets out our processing activities and the corresponding legal bases we rely upon. Where we rely on legitimate interests, we have carried out a balancing test and determined that our legitimate interests are not overridden by your interests, rights, or freedoms, having regard to the safeguards we have put in place.
You have the right to object to processing based on legitimate interests at any time by contacting us at privacy@invitrr.com. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims. Objecting to processing based on legitimate interests does not affect the lawfulness of processing conducted prior to your objection.
We may disclose or share your information as described below. Except as otherwise stated, we do not sell your directly identifying Personal Information (such as your name or email address) to third parties for their independent commercial purposes.
We may disclose, sell, license, transfer, or otherwise make available Aggregate Information and De-Identified Information to any third party for any purpose, without restriction and without compensation to you. This includes, without limitation, sharing anonymized behavioral trends, category popularity data, geographic event density information, platform engagement statistics, and other insights derived from user activity on the Service with advertising partners, analytics companies, research institutions, business partners, investors, and other third parties. Such information does not constitute Personal Information and is not subject to the restrictions that apply to Personal Information under this Privacy Policy.
We engage third-party companies and individuals to perform services on our behalf that support the operation, maintenance, improvement, and promotion of the Service (collectively, "Service Providers"). We share Personal Information with Service Providers only to the extent necessary for them to perform their functions. Our Service Providers are contractually required to maintain the confidentiality and security of Personal Information they access and are prohibited from using it for their own independent purposes. Our current Service Providers include, without limitation: Cloudflare, Inc. (content delivery and media storage); Railway (infrastructure hosting); Amazon Web Services, Inc. (identity verification via Rekognition); Resend (transactional email delivery); Twilio Inc. (SMS delivery); Apple Inc. (push notification infrastructure via APNs); OpenAI (content moderation); Upstash (caching and session management); and Redis Labs (data infrastructure). This list may be updated from time to time. We reserve the right to engage new Service Providers and to change our Service Providers at any time without prior notice to you.
We may share non-personally identifying information, Aggregate Information, and De-Identified Information, as well as certain profile and behavioral information in pseudonymized form, with business partners, event organizers, venues, brands, and other third parties in connection with commercial relationships, partnerships, co-marketing arrangements, and other business activities. Such sharing is conducted in a manner that we deem appropriate and consistent with our business objectives and applicable law.
If and when we introduce advertising within the Service, we may share certain information with advertising technology companies and advertising networks to enable them to serve targeted advertisements to you within the Service. Such information may include Device Information, inferred interest categories, behavioral segments, location information, and similar data. We do not share your name or email address with advertising partners without your consent.
In the event of any merger, acquisition, consolidation, restructuring, financing, investment, sale of all or substantially all of our assets or equity, sale of a line of business, bankruptcy, insolvency proceeding, or any other corporate transaction or change of control (each, a "Business Transaction"), your Personal Information and other data held by us may be transferred to, accessed by, reviewed by, or acquired by the counterparty in such Business Transaction, including potential counterparties and their advisors during due diligence. You acknowledge and agree that: (a) any such transfer does not constitute a sale of your Personal Information; (b) the acquiring or successor entity may use and process your Personal Information in a manner that differs from this Privacy Policy; and (c) your continued use of the Service following any Business Transaction constitutes your acceptance of any updated privacy policy that may apply to you following such transaction. We will provide notice as required by applicable law in connection with any Business Transaction that results in a material change to the way your Personal Information is processed.
We may disclose your Personal Information without notice or consent, to the extent permitted by applicable law, when we reasonably believe such disclosure is necessary or appropriate to: (a) comply with any applicable law, regulation, subpoena, court order, judicial proceeding, legal process, or governmental or regulatory request; (b) enforce or apply our Terms of Service, this Privacy Policy, or our other agreements; (c) detect, prevent, investigate, or respond to fraud, security vulnerabilities, technical issues, or other harmful, unauthorized, or illegal activity; (d) protect the rights, property, safety, or interests of Invitrr, our users, employees, or the public; or (e) respond to emergencies in which we believe disclosure is necessary to prevent serious harm. We are under no obligation to notify you of any such disclosure.
Certain information you include on your Invitrr profile is visible to other users of the Service. This public information includes, without limitation, your first name, profile photographs, biography, city, interests, event listings you create, and verified status. Exercise discretion in the information you choose to make publicly available. We are not responsible for how other users use information that you have made public through the Service.
We may share your Personal Information with third parties in additional circumstances with your consent. Consent may be given explicitly or may be implied from your use of particular features or services.
We and our third-party partners use cookies, pixel tags, web beacons, software development kits ("SDKs"), and similar tracking technologies (collectively, "Tracking Technologies") to collect information about your use of the Service and your activity across other digital properties over time. Our use of Tracking Technologies is described in detail in our Cookie Policy, which forms part of this Privacy Policy and is incorporated herein by reference.
In summary, we use Tracking Technologies for purposes including, without limitation: authenticating your session; remembering your preferences and settings; understanding how you use the Service; measuring the effectiveness of features and promotional content; preventing fraud and abuse; enabling and optimizing advertising; and conducting analytics and research.
For users in the EEA and UK, we operate a consent management mechanism for non-essential cookies and Tracking Technologies as required by applicable law. You may withdraw or modify your cookie consent preferences at any time through the privacy settings within the app. Withdrawing consent to non-essential cookies does not affect the lawfulness of processing based on consent prior to withdrawal.
Your device operating system may offer certain controls over the use of Tracking Technologies, such as the ability to limit ad tracking or reset advertising identifiers. Disabling certain Tracking Technologies may limit the functionality of the Service or affect the relevance of content and experiences delivered to you. For full details on how to manage your cookie preferences, please review our Cookie Policy.
Invitrr does not currently display third-party advertisements within the Service. We expressly reserve the right, in our sole discretion and at any time without prior notice, to introduce advertising features within the Service, including without limitation: display advertising; sponsored content; promoted event listings; native advertising; targeted advertising based on your profile, behavior, interests, and other information we hold about you; and any other form of commercial promotion. Any advertising we introduce may be targeted based on data we have collected about you.
Any update to this Privacy Policy to reflect the introduction of advertising will be posted within the Service. Your continued use of the Service following such update constitutes your acceptance of the updated policy. If you do not wish to receive targeted advertising, you may have limited ability to opt out through your device settings, though this will not eliminate all advertising from the Service.
We may use data derived from your use of the Service, including behavioral data, inferred interests, and demographic information, to measure and report on the performance of promotional content, regardless of whether we introduce third-party advertising.
We retain your Personal Information for as long as is reasonably necessary and proportionate to fulfill the purposes for which it was collected, as described in this Privacy Policy, to comply with our legal obligations (including where we are required to retain data to comply with applicable laws), to resolve disputes, to enforce our agreements, to protect our legal rights and interests, and to support our legitimate business operations.
The appropriate retention period for Personal Information depends on a number of factors, including the nature of the data, the purposes for which it is used, and our legal obligations. In general terms:
Following account deletion, we will endeavor to delete or anonymize your Personal Information from our active systems within thirty (30) days, subject to the exceptions described above. You acknowledge that due to backup and caching systems, data may not be immediately deleted from all systems simultaneously.
We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction. Our security measures include, without limitation, HTTPS/TLS encryption for data transmitted between your device and our servers, secure credential hashing, role-based access controls on production systems, and periodic security assessments.
You acknowledge that no security system is perfect or impenetrable, and we cannot guarantee the absolute security of your Personal Information. The security of your account also depends on the strength and confidentiality of your credentials. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. In the event of a security incident that triggers mandatory notification obligations under applicable law, we will notify affected users and relevant regulatory authorities as required.
The Service may contain links to or integrations with third-party websites, applications, or services that are not operated or controlled by Invitrr, including without limitation authentication providers such as Apple and Google. This Privacy Policy does not apply to such third-party services. We have no control over, and assume no responsibility for, the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party services you choose to use or visit.
We require all users to provide their date of birth during the account registration process. We use this information to verify that users meet our minimum age requirement of 18 years. Users who indicate they are under 18 are prevented from completing registration. We may implement additional age assurance measures from time to time, including without limitation identity verification steps, document verification, or third-party age estimation technology.
We employ a combination of automated systems and human review processes designed to identify users who may be under the age of 18, including where a user has provided a false date of birth. These measures may include, without limitation:
Where our systems or human reviewers identify a user who may be under the age of 18, we will take prompt action including, without limitation, suspending access to the account, requesting additional age verification, or permanently terminating the account and deleting associated Personal Information.
If we determine or become aware that we have collected Personal Information from a person under the age of 18, we will take reasonable steps to delete all such information from our systems as promptly as practicable. We will also terminate the associated account. We will not use any Personal Information collected from an underage user for any purpose other than to facilitate its deletion.
If you believe that a person under the age of 18 has created an account on the Service or has provided us with Personal Information, we ask that you report this to us immediately at safety@invitrr.com. Please include as much information as possible to assist us in identifying the account in question. We take all such reports seriously and will investigate promptly.
We encourage parents and guardians to monitor their children's use of online services and devices. If you are a parent or guardian and believe your child has circumvented our age requirements to access the Service, please contact us immediately at safety@invitrr.com and we will take appropriate action including deletion of the account and all associated data.
Depending on your jurisdiction of residence, you may have certain legal rights regarding your Personal Information. These rights are not absolute, are subject to limitations and exceptions under applicable law, and may be exercised only in the manner described below. We will honor rights required by applicable law but reserve the right to decline requests that are not legally required, that are manifestly unfounded or excessive, or that conflict with our other legal obligations.
Under the General Data Protection Regulation (GDPR) and applicable UK data protection law, you may have the following rights: (a) the right to access a copy of the Personal Information we hold about you; (b) the right to rectification of inaccurate Personal Information; (c) the right to erasure of your Personal Information, subject to our legitimate interests, legal obligations, and other applicable exceptions; (d) the right to restriction of Processing in certain circumstances; (e) the right to data portability in certain circumstances; (f) the right to object to Processing based on legitimate interests, including profiling; (g) the right to withdraw consent where Processing is based on consent, without affecting the lawfulness of Processing prior to withdrawal; and (h) the right to lodge a complaint with your national data protection supervisory authority. Our legal bases for Processing your Personal Information include performance of a contract, legitimate interests, compliance with legal obligations, and consent, as applicable.
Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have the right to: (a) know what categories of Personal Information we collect, use, disclose, and sell; (b) request deletion of Personal Information we have collected, subject to applicable exceptions; (c) correct inaccurate Personal Information; (d) opt out of the sale or sharing of Personal Information for cross-context behavioral advertising purposes (we do not sell directly identifying Personal Information); and (e) non-discrimination for exercising your rights. To exercise these rights, contact us at privacy@invitrr.com.
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act respecting the protection of personal information in the private sector as amended by Bill 64 (Law 25), Canadian residents may have the right to: access Personal Information held about them; request correction of inaccurate Personal Information; withdraw consent to certain Processing, subject to legal and contractual limitations; be informed about the use of automated decision-making that produces legal or significant effects; and receive their Personal Information in a portable format (Quebec residents). To exercise these rights, contact us at privacy@invitrr.com.
To exercise any rights you may have, submit a written request to privacy@invitrr.com. We will verify your identity before processing your request and may request additional information to confirm your identity. We will respond within the timeframe required by applicable law. We reserve the right to charge a reasonable administrative fee for excessive, repetitive, or manifestly unfounded requests to the extent permitted by law. Where we process your data based on legitimate interests, we may continue Processing even after you object if we have compelling legitimate grounds that override your interests, rights, and freedoms, or if Processing is necessary for the establishment, exercise, or defense of legal claims.
Invitrr is operated from Canada. By using the Service, you acknowledge and agree that your Personal Information may be transferred to, stored, processed, and accessed in countries and territories outside of your country of residence, including the United States of America and other countries where Invitrr or its Service Providers maintain infrastructure or operations. These countries may have data protection laws that are different from, and in some cases less protective than, the laws of your country of residence. By using the Service, you explicitly consent to such transfers.
Where required by applicable law, we implement appropriate safeguards for international transfers of Personal Information, which may include Standard Contractual Clauses approved by the European Commission, binding corporate rules, or other lawful transfer mechanisms.
We reserve the right to modify this Privacy Policy at any time and in our sole discretion. When we make changes, we will post the updated Privacy Policy on our website and update the "Last Updated" date at the top of this page. We may, but are not obligated to, notify you of material changes through additional means such as in-app notifications or email. Your continued use of the Service following the posting of any changes to this Privacy Policy constitutes your acceptance of and agreement to be bound by the updated policy. If you do not agree to the updated Privacy Policy, you must immediately discontinue use of the Service.
We encourage you to periodically review this Privacy Policy to stay informed about our data practices and any changes thereto.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: