Privacy Policy
Last updated: 12 September 2026
1. Data We Collect
We store order details (name, email, phone and event information), guest names and responses, and photos you upload. Invitation views and broad referral categories are recorded only with your analytics consent. Analytics records do not contain IP addresses, browser identifiers or full referrer URLs.
2. How We Use Your Data
Your data is used to create and deliver digital invitations, process payments, and provide analytics to event hosts. We do not sell your personal data.
3. Cookies and local storage
Essential cookies remember language, account sessions, reply editing and payment resumption. Sign-in links work once and expire after 10 minutes. We store session IP addresses and browser information for account security, separately from invitation analytics. The ftese_analytics cookie remembers your choice for six months. Visit analytics stay off until you allow them. Change your choice using Cookie preferences in the footer. We respect Do Not Track and Global Privacy Control signals.
4. Third-party services
Payments are processed by your selected provider: Pok Pay or Stripe, depending on availability. The Pok Pay form opens within Ftesë.al, while Stripe uses its own checkout page. Card details are sent directly to the provider; Ftesë.al stores only the payment reference, amount and status. Resend processes your email address and message content for payment, invitation, and account security notices. These are transactional messages. OpenStreetMap opens only when you choose; the service then receives your IP address and browser information. Images may be delivered by the studio’s storage provider. Interface fonts and scripts are served by this site. During payment, Pok Pay and its security partners may process device information and open bank verification.
5. Your rights
Under GDPR, you have the right to access, export, and request deletion of your personal data. Clients can export guest responses and remove event photos in their dashboard. Studio administrators can delete guest responses, photos and invitation analytics. To exercise your rights, contact us at the email on our Contact page.
6. Data Retention
Invitations close on the selected date, or 14 days after the event starts. Closing a link does not delete its data: studio administrators can delete replies, guest links, photos and statistics. Clients can manage their guest links and photos in their dashboard. The maintenance job anonymizes contact details on eligible old cancelled or completed orders after at least 90 days; this requires the server’s maintenance schedule to be enabled. The maintenance job also removes stored email bodies and recipients after 90 days while keeping a receipt to prevent duplicate delivery. Contact the studio for a complete deletion request.
7. Contact
For privacy-related inquiries, please contact us via the email listed on our Contact page.