Data Processing Addendum (DPA)

Last updated: 02/02/2026

This Data Processing Addendum (“DPA”) forms part of the InviteJoy Terms of Service (“Terms”) and applies where InviteJoy processes personal data on behalf of the user (“you”, “your”) in connection with generating digital invitations.

1. Definitions

“Personal Data” means any information relating to an identified or identifiable individual.

“Processing” means any operation performed on Personal Data, including collection, transmission, or temporary handling.

“Controller” means the party that determines the purposes and means of processing Personal Data (you).

“Processor” means the party that processes Personal Data on behalf of the Controller (InviteJoy).

2. Nature and Purpose of Processing

InviteJoy processes Personal Data solely for the purpose of generating your digital invitation and completing your payment. We do not create user accounts and we do not store invitation data in a database. All invite content is processed temporarily in memory and discarded immediately after the invite is generated.

3. Types of Personal Data Processed

Depending on your input, this may include:

• Event details (title, date, location, description)
• Guest names or email addresses (optional)
• Your own name or email address (optional)

Payment information is processed by Stripe and is not accessible to InviteJoy.

4. Duration of Processing

Invite content is processed only for the duration of generating the invite and is not stored afterwards. Payment‑related data is retained only as required by UK tax law.

5. Obligations of InviteJoy (Processor)

InviteJoy agrees to:

• Process Personal Data only on your documented instructions
• Implement appropriate technical and organisational security measures
• Ensure Personal Data is not stored beyond what is necessary
• Ensure staff with access to Personal Data are bound by confidentiality
• Assist you with data subject rights where applicable
• Notify you without undue delay of any Personal Data breach
• Delete or return Personal Data upon completion of processing (which occurs automatically)

6. Sub‑processors

InviteJoy uses the following sub‑processors:

• Stripe – payment processing
• Hosting provider – to operate the InviteJoy website

All sub‑processors are required to maintain GDPR‑compliant data protection standards.

7. International Transfers

Where sub‑processors operate outside the UK, appropriate safeguards such as Standard Contractual Clauses (SCCs) are used.

8. Your Obligations (Controller)

You agree to:

• Ensure you have a lawful basis for entering Personal Data into InviteJoy
• Ensure the data you provide is accurate and appropriate
• Comply with all applicable data protection laws

9. Liability

Liability under this DPA follows the limitations set out in the InviteJoy Terms of Service.

10. Contact

If you have questions about this DPA, you can contact:

Email: invitejoy_help@outlook.com