Privacy notice

1. Data controller

Maribel Isidoro Pichardo, located at Cerrada Pensamiento Uno núm. 4, Xochimilco, Ciudad de México, C.P. 16034, México, is responsible for processing your personal data. Contact: contacto@planivita.com.

2. Data we process

Depending on how you use Planivita, we process:

• About you, as a host: name, email, language, currency, region and time zone, your invitations and your purchase history. Your card or payment account details go to Stripe or Mercado Pago, not to us.
• If you sign in with Google or Facebook: we receive from that provider only your name, your email address, whether that email is verified and an identifier for your account. We never receive your password and we have no access to your contacts, emails, files, photos or posts.
• About your acceptance of these documents: accepted version, date and time, invitation, email, IP address and browser.
• About your guests, entered by you or given by them when they RSVP: name, email, phone, party size, RSVP answer, table and tickets.
• Content: photos, texts, logos and audio in invitations (music or recordings, which may include someone's voice), and the photos your guests upload to the album, with the name they type.
• Technical data: server security logs (including IP address) and invitation view counts without personal data.

3. Your guests' data: you decide

For your guests' data, you are the controller and Planivita acts as a processor: we process it only on your behalf and to provide the service. Before entering it you must have their consent and tell them how you will use it.

We do not ask for or want sensitive data (health, religion, origin, orientation, etc.). Please do not include it in your invitations or guest data.

If you upload a recording with someone's voice, you answer for having their permission. Planivita only stores it and plays it in your invitation: it does not analyze it or use it to identify anyone.

4. Why we use your data

Purposes required for the service:

• Create and manage your account.
• Use the data we receive from Google or Facebook only to create your account, sign you in and link it to the Planivita account with the same email. We do not use it for advertising, we do not sell it and we do not share it with anyone else.
• Design, publish and show your invitations.
• Send, on your instructions, invitations, confirmations, tickets and thank-you messages to your guests.
• Issue and validate tickets and control access at the door.
• Process payments, issue receipts and prevent fraud.
• Provide support, keep the service secure and handle reports.
• Keep evidence of your acceptance of the terms and comply with legal obligations.

5. Secondary purposes

With your permission, we may also use your data for aggregated statistics that help us improve Planivita and to tell you about new features. If you do not want this, write to contacto@planivita.com; saying no does not affect the service.

6. Who we share data with

We do not sell your data or your guests' data. We share it only with:

• Amazon Web Services: hosts the service, the database and email delivery (servers in the United States).
• Stripe and Mercado Pago: process payments.
• Google and Meta (Facebook): only if you choose to sign in with them. They confirm your identity to Planivita; we do not send them data about your invitations or your guests.
• Authorities, when a law or an order requires it.

These providers act as processors, under contract and only to provide the service. These transfers do not require your consent under the law.

7. How long we keep data

• Invitations, designs, uploaded audio, guests, tickets and album photos: up to 30 days after the event, or earlier if you delete them.
• Email in new theme requests: 1 year.
• Record of acceptance of the terms: 5 years.
• Payment data and receipts: as long as tax laws require.
• Server security logs: 14 days.
• Your account data, including what we receive from Google or Facebook: while you keep your account; it is deleted when you ask us to delete the account.

8. Your rights and how to withdraw consent

You can access, rectify or delete your data or object to its use, and withdraw your consent or limit its use. Write to contacto@planivita.com with your name, your account email, an ID and a description of your request. We will answer within 20 business days and, if it applies, carry it out within the following 15 business days.

If you signed in with Google or Facebook, you can also remove Planivita's access to that account at any time: on Google at myaccount.google.com/permissions; on Facebook under Settings > Apps and websites.

If you are a guest at an event, you can send your request to the host or to us, and we will handle it or pass it on to them.

9. Cookies and browser storage

We use your browser's storage to keep you signed in and to remember your preferences and your order in progress. We do not use advertising cookies or third-party tracking tools.

10. Minors

Planivita is for adults. If you publish photos or data of minors, you do so under your responsibility and with the consent of their parents or guardians.

11. Security

We protect data with encryption in transit, access restricted to what is necessary and automatic deletion. No system is infallible; if a breach affects your rights, we will let you know.

12. Changes to this notice

We will publish any change on this page with its update date. If the change is important, we will ask you to accept it before you publish an invitation again.

13. Authority

If you believe your right to the protection of personal data has been violated, you can turn to the competent data protection authority.