InvitedBy Privacy Policy

1. When you visit the Site

Like any website, our hosting provider records standard server logs when you visit: your IP address, browser and device type, the pages you request, the referring link, and the time. We may use aggregate, cookieless analytics (page views, referrers, country) to understand how the Site is used. We do not set tracking cookies, and there are no advertising pixels on the Site. The only cookie we set is the session cookie that keeps a brand user signed in to the portal (Section 5). If that changes, this Policy will say so first.

2. When you write to us

If you email hello@invitedby.org, we keep your message and contact details so we can reply and keep track of the conversation. We use them for that purpose, and we won’t add you to a marketing list without asking.

3. If you work at a brand we’d like to work with

We reach out to marketers at brands we think InvitedBy would suit. To do that we may collect business contact information from public sources: your company’s website, professional profiles, press coverage, and business directories, usually your name, title, and work email. We use it to send a small number of messages about InvitedBy and to keep our notes on who we’ve contacted. To stop hearing from us, reply to any message or email hello@invitedby.org; we’ll stop promptly and keep only what we need to make sure we don’t contact you again.

4. If you lend your name to an invitation

A brand you are a customer of may ask you to lend your name to invitation cards mailed on your behalf. The brand gives us what it already holds about you: your name, email address, mailing address, how long you have been a customer, your referral code, and the facts the brand can vouch for (a membership length, a class you attend, and the like). We use that to email you the invitation, on the brand’s behalf, from an invitedby.org address with replies going to the brand. If you ignore it, nothing further happens and the brand can ask us to delete it.

If you take part, you tell us your reason and, if you like, a note, and you choose which kinds of people your cards may go to. You then see the exact card and approve it. We keep the card as you approved it, the version of the release you agreed to, and the time, IP address, and browser of your approval, as the record of your consent. Cards and their verification pages show your first name, last initial, neighborhood, the facts shown, your reason and note, and your referral code, exactly as you approved them. Your email address and street address never appear on a card or a page.

You can withdraw at any time from the link in your confirmation email. Cards in a campaign that has not yet gone to print are stopped; once a campaign has gone to print, its cards cannot be recalled, and any reward for an accepted invitation is unaffected. The brand sees the addresses your cards went to, as any mailer does, and results as counts by sender (how many of your cards were verified, accepted, or declined), never which address did what. You can have your data deleted by asking us or the brand; the counts survive without your name.

5. If you use the Site on behalf of a brand

We create portal accounts for the people at a brand who run its invitations; there is no public sign-up. We hold your name and work email, and signing in sets a session cookie so you stay signed in. Customer data you upload is used only to run your invitations: to contact the customers you name on your behalf and to print the cards they approve. It is deleted on request. Payments are handled by Stripe; we never see card numbers. Billing records are kept as long as the law requires.

6. If you received a card

Every InvitedBy card is sent on behalf of the person named on it and paid for by the brand named on it. The card tells you why you were invited, and that printed reason is the only targeting we use: your address came either from the brand’s own records or from a list provider, matched to the reason on the card (for example, living near the person who sent it). We don’t build profiles of you, and we never target anyone based on sensitive information (health, finances, religion, and the like). Nothing about you appears on the card or on its page.

What we keep about a card: the card number, the name and address it was mailed to, the sender and brand, the dates it was approved and mailed, and whether it was verified, accepted, or declined. When the card’s page is opened, verified, accepted, or declined, we record the time, the browser type, and an approximate location (country, region, city) taken from the request, so we can tell that the card arrived and report results. If you accept, we hand you to the brand’s site with the sender’s code and a tag identifying the card; what happens there is under the brand’s own privacy policy. The brand that paid for a card sees the address it was mailed to, as any mailer does, and results as counts and rates by sender and by reason, never which address verified, accepted, or declined.

To decline or stop InvitedBy mail: scan the card and tap decline, or email hello@invitedby.org with the card number, or your name and address. Either way we add that address to our do-not-mail list for every brand we work with. We keep that list permanently so the request holds, and declining takes no explanation.

7. How we share information

We share personal information only with the service providers who run things for us (website hosting and database, email delivery, payments, and the printing and mailing partners who produce and deliver cards), who may use it only for our purposes; with list providers, who receive only the areas and criteria a card may go to, never a sender’s or recipient’s details; with the brand that paid for a card, as described in Sections 4 and 6; when the law requires it or to protect our rights and safety; and with a successor if InvitedBy or Blackjay, LLC is ever sold or merged, under this Policy. We do not sell personal information, and we do not share it for advertising.

8. Your choices and rights

Depending on your state, you may have legal rights to access, correct, delete, or obtain a copy of your personal information. We extend those core rights to every U.S. resident regardless of state: email hello@invitedby.org with your request and enough information for us to find your records and confirm it’s you. We respond within 45 days, and we never treat you differently for asking. Do-not-mail requests are honored under Section 6 and withdrawals under Section 4, and neither is conditioned on anything.

9. How long we keep things

Server logs and analytics: a short, rolling period. Conversations and business contacts: while the conversation or outreach is active, and a reasonable period after. Sender records: while your consent stands and for the campaigns it covered, then deleted on request; the record of your consent is kept as proof that the card was approved. Card records: as long as needed to honor the card, report results to the brand, and keep the do-not-mail list accurate, after which they are deleted or de-identified. Do-not-mail entries: permanently, because that is the point.

10. Security, children, and where we operate

We use reasonable safeguards to protect the information we hold, though no system is perfectly secure. The Site and our service are not directed to anyone under 18, and we don’t knowingly collect information from children under 13; if you think a child has given us information, contact us and we’ll delete it. We operate from the United States and direct the Site to U.S. residents; if you use it from elsewhere, your information is processed in the U.S. under this Policy and U.S. law.

11. Changes

We may update this Policy by posting a revised version with a new “Last updated” date. If a change materially affects how we use information we already hold, we’ll say so on the Site before it takes effect.

12. Contact

Blackjay, LLC (InvitedBy) · Washington, D.C. · hello@invitedby.org