Your information deserves care.

When you use Imbita, you may give us:

• Your name
• Your email address
• Contact details such as a mobile number
• Account information, including sign-in details handled by our authentication provider
• Event information such as names, dates, venues and schedules
• Photos and files you upload
• Guest lists
• RSVP responses
• Seating and table information
• Messages you send through our forms
• Details submitted with a custom design quotation request

Event organisers may add or collect information about their guests when using Imbita Guests, Imbita RSVP, Imbita Tables and Imbita Check-in. This can include:

• Guest name
• Contact details
• RSVP status
• Plus-one information
• Dietary or meal selections
• Seating assignment
• Check-in status
• Answers to custom RSVP questions

There's an important distinction here. Organiser account data is information about the person who signs up for Imbita. Guest and event data is information an organiser enters or collects for their own celebration. For guest and event data, Imbita acts on the organiser's instructions: we store and process it so their event works, and we don't use it to market to guests.

Like most websites, our infrastructure records basic technical information when pages and forms are requested. This can include device type, browser, IP address, approximate location derived from IP, pages visited, referring pages, and performance or error diagnostics.

We use this to keep the platform secure, diagnose problems and improve performance. We'll update this section if we add additional analytics or measurement tools.

We use information to:

• Provide and operate the Imbita platform
• Publish your event pages and invitations
• Process RSVPs and manage guest information
• Process payments through our payment provider
• Authenticate accounts and keep sessions secure
• Provide customer support and answer enquiries
• Prevent fraud and abuse
• Protect the security and integrity of the platform
• Monitor and improve reliability and performance
• Send important transactional messages, such as account, event or payment notifications

Payments are handled by third-party payment providers. When you pay, your payment details are submitted to that provider, not stored by Imbita. We keep records of the transaction — such as the amount, plan, status, reference and date — so we can support your purchase.

Imbita does not store full card numbers.

We share information only where reasonably necessary to run the service, with providers supporting areas such as:

• Hosting and content delivery
• Database infrastructure
• Authentication
• Payment processing
• Transactional email delivery
• Analytics and diagnostics
• Security and fraud prevention

We may also disclose information where required by law, or to protect the rights and safety of people using Imbita.

Imbita does not sell personal information for monetary consideration.

We keep information only as long as reasonably necessary to:

• Provide the service and keep your events available to you
• Maintain your account
• Meet legal, tax and accounting obligations
• Resolve disputes
• Maintain security and prevent abuse
• Keep legitimate business records

When information is no longer needed, we delete it or remove details that identify a person. Deleted content may persist briefly in routine backups.

We use reasonable technical and organisational safeguards designed to protect information, including encrypted connections, access controls, and database rules that keep each account's guest data private to that account.

No online service can promise perfect security, and we won't claim otherwise. If we become aware of a security incident affecting personal information, we'll respond in line with applicable law.

Imbita is initially focused on the Philippines, and this policy is written with the Data Privacy Act of 2012 (Republic Act No. 10173) and National Privacy Commission guidance in mind.

Depending on the circumstances, you may have the right to:

• Be informed about how your personal information is processed
• Access the personal information we hold about you
• Correct information that is inaccurate or out of date
• Object to certain processing
• Request deletion or blocking where legally applicable
• Receive a copy of information you provided, where portability applies
• Raise a concern about how your personal information has been handled

To make a request, contact us through our contact page. We may need to verify your identity before acting on a request.

If your details were added to an event by an organiser, that organiser controls the guest list. You can contact the organiser directly, or contact Imbita support and we'll help — including passing your request to the organiser or assisting with information stored through an Imbita event.

We use essential cookies and similar browser storage to keep you signed in, maintain your session and remember basic preferences. These are required for the service to function.

If we later add optional analytics or preference cookies, we'll describe them here and provide appropriate choices.

Imbita is designed for organisers who are adults, and we don't intentionally collect personal information directly from children without appropriate authorisation where required.

Family celebrations often include children as guests. Details about a child added by an adult organiser are event data managed by that organiser — they are not an independently created child account.

Some of our infrastructure and service providers may operate outside the Philippines. Where information is processed abroad, we take reasonable steps so it stays protected consistently with this policy and applicable law.

This policy will evolve with Imbita. Material updates will be reflected in the "Last updated" date at the top of the page.