Privacy Policy

1. Introduction

Welcome to InvitarAhora (https://invitarahora.co, hereinafter "InvitarAhora", "We", "Us" or "Our"). We specialize in providing digital invitations for weddings, quinceañeras, and other events. We are committed to protecting the privacy and security of our users ("You", "Your"). This Privacy Policy describes how we collect, use, disclose, and protect your Personal Data when you visit our website, communicate with us (including through WhatsApp and email), purchase our products, or use our services (collectively, the "Service"). It also describes your privacy rights and how the law protects you. By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. Please read this policy carefully.

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person. This includes information that can identify you directly (such as your name or phone number) or indirectly (such as your IP address combined with other data).
Usage Data: Data collected automatically when using the Service (for example, pages visited, visit duration, device type).
Cookies: Small files stored on your device (computer or mobile device) by a website.
Data Controller: The entity that determines the purposes and means of processing Personal Data. For this policy, InvitarAhora is the Data Controller.
Data Processor (or Service Provider): Any natural or legal person who processes data on behalf of the Data Controller (for example, payment processors, hosting services).
Service: Refers to the InvitarAhora website (https://invitarahora.co), the products offered, and communications related to our services.
You: The person who accesses or uses our Service, or communicates with us.

4. Information We Collect

We collect different types of information for various purposes to provide and improve our Service for you.

(a) Information You Provide Directly

Order Information: Order Information: When you purchase an invitation, we collect the information necessary to process your order and communicate with you, such as your name, email address, phone number (especially if you communicate via WhatsApp), and billing information (although complete payment details are usually handled by our external payment processors).

Invitation Content: Invitation Content: To create your digital invitation, you will provide specific details relevant to the event, which may include names (of hosts, couple, quinceañera, parents), event date, time, location(s), RSVP information (email or phone number), and potentially personal messages or photos you decide to upload. This information is treated with special care.

Communication Information: Communication Information: If you contact us for inquiries, support, or during the order process (via email, WhatsApp, website contact form, etc.), we collect your name, email address, phone number, and the content of your communication history. Please note that communications through WhatsApp are also subject to WhatsApp's Privacy Policy.

(b) Automatically Collected Information (Usage Data)

Device and Connection Information: Device and Connection Information: When you visit our website, we and potentially other integrated tools (such as analytics) automatically collect information about the device you use, such as your IP address, approximate location, device type, operating system, browser type and version, and potentially unique device identifiers.

Website Usage: Website Usage: We, or our service providers such as Google Analytics, collect information about how you interact with our website, including pages you visit, date and time of your visit, time spent on those pages, referring website addresses, clicks, and other diagnostic data.

(c) Information Collected through Cookies and Tracking Technologies

Our website uses Cookies and similar tracking technologies (such as web beacons and pixels) to track activity on our Service, store certain information, improve functionality, and analyze usage. We use the following types of cookies:

Performance Cookies: Performance Cookies: These cookies help us understand website performance and user experience. They may be used in conjunction with analytics tools.
Functionality Cookies: Functionality Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences.
Targeting/Advertising Cookies: Targeting/Advertising Cookies: We do not currently use targeting or advertising cookies on our website. We do not track users across websites for advertising purposes, nor do we share your data with advertising networks.

You can manage your Cookie preferences through your browser settings. Our website presents a cookie consent banner that allows you to manage consent for non-essential cookies. You can also contact us to update your cookie preferences.

(d) Third-Party Information

Payment Processors: Payment Processors: We use third-party payment processors (for example, Mercado Pago, PayU, PayPal) to handle transactions securely. We do not store your complete credit card number. Our processors provide us with payment confirmation and potentially limited details such as the last four digits of your card or billing address for verification and record keeping. These processors have their own privacy policies governing the use of your data.

5. How We Use Your Information

We use the Personal Data collected for the following purposes:

To Provide and Maintain our Service: Process your orders, create and deliver your purchased digital invitations.
To Create Your Invitations: Use the specific event details you provide to generate the personalized digital product.
To Process Payments: Facilitate transactions through our external payment processors.
To Communicate With You: Respond to your inquiries via email or WhatsApp, send order confirmations, deliver final products, provide customer support, and send important notices related to the service.
To Improve Our Service: Analyze Usage Data (often aggregated or anonymized) to understand how our website is used, identify trends, troubleshoot issues, and improve user experience and offerings.
For Marketing Purposes (with your explicit consent): Send information about new products or special offers via email or WhatsApp, if you have opted to receive such communications. You can opt out at any time (for example, through an unsubscribe link in emails or responding "STOP" to WhatsApp messages, if applicable).
For Security and Fraud Prevention: Monitor website activity for potentially fraudulent actions and ensure the security of our Service and user data.
To Comply with Legal Obligations: Comply with legal requirements (for example, tax record keeping in Colombia), respond to legal requests from public authorities, and enforce our terms and conditions.

6. Legal Basis for Processing Personal Data

Our legal basis for collecting and using the Personal Data described above depends on the specific context:

Contractual Necessity: Processing is necessary to execute our contract with you (for example, fulfill your invitation order, communicate about the order).
Consent (Authorization): When you have given us your explicit consent (for example, for marketing communications, non-essential cookies). You can withdraw your consent at any time.
Legitimate Interests: Processing is necessary for our legitimate interests (for example, improving our Service, website security, fraud prevention), provided these interests do not override your data protection rights.
Legal Obligation: Processing is necessary to comply with a legal obligation (for example, tax laws, responding to legal requests).

7. Sharing Your Information

We do not sell your Personal Data. We may share your information only in the following limited circumstances:

With Service Providers

We share information with vendors and external service providers who perform services on our behalf, such as:

Payment Processors: Payment Processors: We may share your personal data (specifically: Email, Full Name, and Identification Document) with the following third-party service provider solely for the purpose of processing payments: Mercado Pago: Used to process Credit Card and PSE payments. You can view their privacy policy at Mercado Pago Privacy.
Analytics Providers: Analytics Providers: (for example, Google Analytics) To help us understand website usage.
Invitation Hosting: Invitation Hosting: Our live invitation previews are hosted on a third-party platform (Wix) and displayed in iframes on our website. When you view a live preview, you are interacting with content hosted on that platform, which is subject to its own privacy policy.
Communication Platforms: Communication Platforms: While communication occurs through platforms such as WhatsApp or email providers, data shared within those communications is primarily governed by those platforms' policies. We generally do not "share" data with them as a data processor, but rather use them as a channel.

These providers generally only have access to the Personal Data necessary to perform their functions and are obligated (either contractually or through their own policies) to protect it.

For Business Transfers

If InvitarAhora participates in a merger, acquisition, or asset sale, your Personal Data may be transferred as part of that transaction. We will notify you before your Personal Data is transferred and becomes subject to a different privacy policy.

By Legal Requirements

We may disclose your Personal Data if required by law or in response to valid requests from public authorities (for example, a court, a government agency) or to protect the rights, property, or safety of InvitarAhora, our users, or others.

8. Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect your Personal Data against unauthorized access, use, alteration, or disclosure. This includes using security features provided by our hosting infrastructure and payment processors. We limit access to Personal Data to personnel who need it to perform their job functions. However, please note that no method of transmission over the Internet or electronic storage method is 100% secure. Communications through channels such as WhatsApp or email carry inherent security risks. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security.

9. Data Retention

We will retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. Retention periods vary:

Order Information and Communication History: Retained for the time necessary to fulfill the order, provide customer support, and comply with legal and financial record-keeping obligations (for example, Colombian tax laws may require retention for a specific period, generally several years).
Invitation Content: Retained for the period necessary to complete the design process, allow you to approve and receive your final invitation, and potentially for a short period thereafter for support purposes, after which it will be deleted 30 days after your event date.
Usage Data: Generally retained for a shorter period, often in aggregated or anonymized form for analytical purposes through Google Analytics, unless needed for security investigations or legal compliance. Retention is subject to analytics provider policies.

When retention is no longer necessary for the stated purpose or required by law, we will securely delete or anonymize your Personal Data.

10. Your Privacy Rights

Under applicable data protection laws (including Colombia's Law 1581 of 2012), you have certain rights regarding your Personal Data. These may include the right to:

Know, Update, and Rectify: Know what data we have about you, request updates, and correct inaccurate or incomplete Personal Data.
Request Proof of Authorization: Request proof of the consent (authorization) you granted us for processing (unless processing is legally permitted without consent).
Be Informed: Be informed about how we use your Personal Data.
File Complaints: File a complaint with the competent data protection authority in Colombia (Superintendencia de Industria y Comercio - SIC) if you believe your rights have been violated.
Revoke Authorization and/or Request Deletion: Request deletion (erasure) of your Personal Data or revoke your consent for processing, under certain conditions (for example, if processing is illegal, data is no longer necessary, or consent is withdrawn), provided there is no legal or contractual duty to retain the data.
Free Access: Access your Personal Data that we have processed, free of charge, in accordance with the law.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request in accordance with applicable law (generally within the timeframes established by Colombian law). We may need to verify your identity before processing your request.

11. International Data Transfers

Your information, including Personal Data, may be processed and stored on servers located outside Colombia, particularly through our use of service providers such as payment processors (such as PayPal), analytics tools, and hosting infrastructure. By using our Service, you acknowledge that your Personal Data may be transferred to these locations where data protection laws may differ from those of Colombia. We rely on data protection mechanisms implemented by our service providers (such as adherence to frameworks like Standard Contractual Clauses or adequacy decisions, when applicable) to ensure an adequate level of protection for your data when transferred internationally.

12. Children's Privacy

Our Service is intended for use by adults (18 years and older) to purchase invitations. We do not knowingly collect Personal Data directly from persons under 13 years of age. While our invitations may be for events involving minors (such as quinceañeras), the purchase transaction and provision of necessary information must be completed by a parent, legal guardian, or authorized adult 18 years or older. If you are a parent or guardian and realize that a child under 13 has provided us with Personal Data without your consent, please contact us immediately. If we realize we have collected Personal Data from a child under 13 without parental consent verification, we will take steps to delete that information.

13. Links to Other Websites and Third-Party Services

Our Service may contain links to other websites (for example, event venue websites included in an invitation) or use third-party services (such as WhatsApp for communication or payment processors) that are not operated by us. Our live invitation previews are displayed in iframes and hosted on a third-party platform. If you click on a third-party link or use a third-party service, you will be directed to that third party's site or be subject to their terms and policies. We strongly recommend that you review the Privacy Policy and Terms of Service of each site you visit and service you use (including WhatsApp, your chosen payment processor, and any third-party platforms hosting our invitation previews). We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites or services.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. For significant changes, we may also notify you by email or through a prominent notice on our Service before the change takes effect. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

By email: [email protected]
By visiting this page on our website: https://invitarahora.co