Skip to content
New: Client Galleries — deliver photo shoots with your own brand and watermark · See what’s new
Back to Inbitado

Privacy Policy

Last updated Oct 26, 2026 · Version 1

This Privacy Policy explains how Inbitado (“Inbitado”, “we”, “us”), Bayanihan Flats, Pajac-Maribago, Lapu-lapu City, Cebu, collects, uses and protects personal information when you use Inbitado, in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

1. Who is responsible

  • For accounts (hosts, Professionals and staff), Inbitado decides how your information is used.

  • For guest lists, RSVPs and event photos, the host decides whose information is added and why; Inbitado processes it on the host’s behalf to run their event.

2. What we collect

  • Account details: name, email, password (stored encrypted), time zone, and for Professionals an optional business name, link and logo.

  • Events: event names, dates, venues, invitation content and settings.

  • Guest lists: names, and optionally email, phone, group, plus-ones and the host’s notes, added by the host.

  • RSVPs: the answer, party size, companions, meal preference, dietary notes and messages a guest sends. Dietary notes may reveal health or religious information; only share what you’re comfortable with.

  • Photos and videos: files uploaded to events and galleries, the name the uploader entered, and basic technical details. We remove location and camera details from videos and from the copies we show of photos.

  • Payments: the plan, amount and status. Online payments are handled by our payment provider; we don’t receive your full card details. For offline payments we keep the reference and the proof you upload.

  • Referrals and wallet: codes used, rewards earned and wallet history.

  • Usage and security: sign-in times, IP address, and records of staff actions, used to keep accounts secure.

3. Why we use it

  • To provide the Service: invitations, RSVPs, galleries, storage, downloads and payments (to perform our agreement with you).

  • To send service emails: verification, password resets, payment updates, storage and inactivity warnings.

  • To keep Inbitado secure and prevent abuse (our legitimate interest).

  • To meet legal, tax and accounting duties.

We do not sell personal information, and we do not use it for third-party advertising.

4. Who we share it with

  • The people you share with: guests see the invitation and, where the host allows, the event’s photos; Professionals’ clients see their gallery.

  • Service providers that process information for us under contract: hosting and file storage, our payment provider, and our email provider.

  • Authorities, when the law requires it.

5. How long we keep it

  • Deleted events are kept for 30 days so they can be restored, then removed for good.

  • Photos and videos of Free accounts are removed after a long period without activity, after email warnings.

  • When a paid plan ends, nothing is deleted for 90 days; after that, the oldest events’ media may be removed if the account stores more than Free allows.

  • Download files (ZIPs) expire after a short time. Payment records are kept as long as tax rules require.

  • When you delete your account, we delete or anonymise your information unless the law requires us to keep it.

6. How we protect it

Connections are encrypted (HTTPS), passwords are hashed, uploaded files are stored privately and shown through short-lived links, and staff access is limited by role and recorded in an audit log.

7. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to object, to correct, to erase or block, to data portability, to damages, and to file a complaint with the National Privacy Commission. Hosts can correct or delete guest information in their dashboard; guests can ask the host, or contact us. To use your rights, email our Data Protection Officer.

8. Cookies

We use only the cookies needed to keep you signed in and to protect forms against misuse. We don’t use advertising or tracking cookies. Your browser may also remember small preferences (such as dark mode) on your device.

9. Children

Accounts are for people aged 18 and over. Hosts who add or upload information about children (for example at a christening or birthday) must have their parent’s or guardian’s permission.

10. Changes to this policy

We may update this policy. The date of the latest version is shown at the top of this page. For important changes, we will ask you to accept the new version the next time you log in.

11. Contact us

Data Protection Officer: Jave Lupango
Email: dpo-dataprotection@inbitado.com
Address: Bayanihan Flats, Pajac-Maribago, Lapu-lapu City, Cebu