Privacy Policy

Last updated: May 2026

What we collect

InviteReader collects only what's needed to turn your text and screenshots into calendar events:

Account info — email address, name, profile photo (from Google or your sign-up form).
Phone number — only if you opt in to SMS or voice reminders. Verified via Twilio's Verify service before we ever send anything.
Event content — the text or screenshots you submit, and the structured event details extracted from them. Stored against your account so you can review them later.
Calendar tokens — when you connect Google or Microsoft calendars, we store the OAuth access token (and refresh token when granted) so we can add events you confirm.
Reminder activity — timestamps of SMS, voice calls, and emails we sent for your events, plus your acknowledgement taps and replies, so the escalation chain knows when to stop.
Logs — standard server logs (IP address, browser, request timestamps) for security and debugging. Retained 30 days.

How we use it

To run the product (extract events, save them, send reminders).
To debug failures (logs).
To prevent abuse (rate-limiting demo calls and SMS verifications).

We do not sell your data, share it with marketing partners, or use it for advertising. Your event content is never used to train AI models.

Third parties we send data to

To operate InviteReader we share specific data with these providers, each covered by their own enterprise privacy terms:

Supabase — hosts our database and authentication. Stores everything except API keys.
Vercel — hosts the application.
Google Gemini — receives the text or image you submit when extracting an event. Google's policy is that API content is not used to train its models.
Twilio — sends SMS messages and verification codes; placed phone number, message body, and short delivery metadata.
Resend — sends fallback reminder emails.
vapi.ai — places AI voice reminder calls. Receives your phone number, the event context for that single call, and a transcript afterwards.
Google / Microsoft Calendar APIs — receives event details only for events you explicitly add to your calendar.

SMS messaging — opt-in & opt-out

You opt in to SMS reminders by entering your phone number in Settings and confirming the verification code we send. You can opt out at any time by replying STOP to any message. Reply HELP for support contact info. Message and data rates may apply. Messages are typically 1–3 per scheduled event.

We don't share your phone number with anyone except Twilio (the carrier) and vapi.ai (only if you've enabled voice reminders).

Your rights

You can delete your account at any time from Settings. Deletion removes your profile, events, and reminder history within 30 days; backup snapshots are purged on a 90-day rolling schedule. To export your data or request deletion via email, contact us at support@invitereader.com.

Data retention

We keep your account data while your account is active. If you stop using InviteReader for 24 months, we'll email you and then delete the account.

Children

InviteReader isn't intended for anyone under 13. We don't knowingly collect data from children.

Changes

When we change this policy, we'll update the date at the top and email anyone with an active account if the change is material.

Contact

Questions: support@invitereader.com.