Privacy

How inbyte.io handles personal data

Last updated 11 October 2026. This notice is written for the Data Privacy Act of 2012 (RA 10173); it is a draft until reviewed by counsel.

Who we are

inbyte.io makes digital invitations for hosts (our clients) and shows them to their guests. For a guest's data the host is the personal information controller and inbyte.io processes it on the host's instructions; for a client's own account data inbyte.io is the controller.

What we collect

From hosts: name, email, the details of the occasion and the pictures they give us, and payment records (amount, method, reference — never card numbers).
From guests, when they reply: the name they type, the number of seats, a message, and answers to the host's questions. When the host prepares a guest list, the host gives us names, seats, and sometimes an email or phone number so the guest can receive their own link and a reminder.
From every visit: a daily count of page views per invitation. We do not store a visitor's IP address with their reply beyond what is needed to prevent abuse, and we set no advertising cookies. A private invitation sets one cookie so a guest is not asked for the password again.

What we use it for

To build, show and keep the invitation working; to send the host each reply; to send a guest their own link or a reminder when the host asks; to keep accounts and payments straight; and to answer questions. Nothing else — we never sell data, and we never use a client's photos in our own marketing without written permission.

How long we keep it

An invitation and its replies stay for the live period the host bought, then 90 days, and are then deleted on request or at the next clean-up. Payment records are kept for the period Philippine tax law requires.

Where it lives

On Google Cloud in the Asia-Pacific region, behind the access controls of the platform: a host sees their own events only; a guest sees only the invitation they were sent.

Your rights

Under the Data Privacy Act you may ask what we hold about you, have it corrected or deleted, and object to its use. Write to info@inbyte.io; guests may also ask the host, who can edit or remove a reply from their inbox.