TinselVite Privacy Policy

Effective Date: May 11, 2026  |  Last Updated: May 12, 2026

This Privacy Policy describes how TinselVite, LLC (“TinselVite,” “we,” “our,” or “us”) collects, uses, and discloses information when you access or use the TinselVite mobile application and any related services (collectively, the “Service”). By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Service.

1. Who We Are

TinselVite, LLC is a limited liability company organized under the laws of the State of South Carolina, with a principal mailing address of 11134 Broad River Rd, Ste B PMB 1003, Irmo, SC 29063, United States. We operate the TinselVite mobile application, which permits users to design, generate, and share digital invitations through artificial intelligence assisted tools.

2. Information We Collect

We collect information in the categories described below.

2.1 Information You Provide

(a) Account information, including your name, email address, password, and, if you choose to provide it, a display name.

(b) Event information, including event titles, dates, times, locations, descriptions, and host preferences.

(c) Guest information you input, including guest names, email addresses, and telephone numbers, for the purpose of distributing invitations and tracking responses.

(d) Text inputs you submit for use with our artificial intelligence design features.

(e) Uploaded images, including reference or inspiration photographs you provide to guide invitation generation.

(f) Communications you send to us, including support requests and feedback.

(g) Selected contact information, when you elect to use the optional contact picker to identify recipients for an invitation. The contact picker reads the address book on your device only on your device, and only the contact details you affirmatively select are transmitted to the Service. We do not transmit, store, or otherwise process your full contact list.

(h) Push notification tokens issued by Apple Push Notification service or Firebase Cloud Messaging, used solely to deliver application notifications to your device when you have granted notification permission.

(i) Calendar access, when you grant the application calendar permission to add invitation events to the calendar on your device at your direction. Calendar contents are not transmitted to or stored by the Service.

2.2 Information from Guests

When a host shares an invitation with you through a private URL, we may collect your name, your contact information if you submit it, your RSVP status, and any optional message you choose to include with your response. Guests are not required to create an account to view an invitation or submit a response.

2.3 Information Collected Automatically

(a) Device information, including device model, operating system, unique device identifiers, and mobile network information.

(b) Log data, including IP address, access times, application version, and crash reports.

(c) Usage information, including features accessed, screens viewed, and interactions within the Service.

(d) Approximate location information derived from IP address. We do not collect precise geolocation unless you grant permission through your device settings.

2.4 Payment Information

All payments for the Service are processed by Apple Inc. through the Apple App Store or by Google LLC through Google Play. We do not receive or store your full payment card or financial account information. We receive transaction confirmations and limited purchase details from Apple and Google necessary to deliver the Service.

3. How We Use Information

We use the information we collect for the following purposes:

(a) to provide, operate, maintain, and improve the Service;

(b) to generate invitations, including by processing text inputs and reference images through artificial intelligence providers;

(c) to deliver invitations to recipients you designate and to display RSVP responses to the host;

(d) to verify transactions processed through Apple App Store and Google Play;

(e) to communicate with you about your account, transactions, security matters, and changes to our terms;

(f) to provide customer support and respond to your inquiries;

(g) to detect, investigate, and prevent fraud, abuse, and security incidents;

(h) to comply with legal obligations and to enforce our Terms of Service;

(i) to analyze usage trends and improve the reliability and features of the Service; and

(j) to deliver in-application notifications, push notifications, electronic mail, and short message service (SMS) communications to you and, at your direction, to invitation recipients you designate.

4. Disclosure of Information

We do not sell your personal information. We disclose information only as described in this Section 4.

4.1 Service Providers

We share information with third party service providers that perform services on our behalf under written agreements that include confidentiality and data protection obligations. Our service providers currently include the following:

(a) OpenAI, L.L.C., which provides image generation through the GPT image model. Text prompts and reference images you submit for image generation are transmitted to OpenAI for processing. We use OpenAI’s application programming interface under terms that do not permit OpenAI to use submitted data to train its models.

(b) Anthropic, PBC, which provides text processing through its Claude model. Text inputs you submit for design guidance may be transmitted to Anthropic for processing.

(c) Supabase, Inc., which provides authentication, database hosting, and file storage.

(d) Resend (Resend.com, Inc.), which provides transactional email delivery.

(e) Apple Inc. and Google LLC, which provide application distribution, in-application purchase processing, and the underlying push notification infrastructure.

(f) RevenueCat, Inc., which provides receipt validation, in-application purchase entitlement management, and webhook delivery of purchase events in connection with transactions processed through Apple App Store and Google Play.

(g) Expo, Inc., which provides push notification token issuance and relays push notification payloads from the Service to Apple Push Notification service and Firebase Cloud Messaging on our behalf.

(h) Cloudflare, Inc., which provides content delivery and edge hosting for the web pages used by guests to view invitations and submit responses.

4.2 Recipients You Designate

We share invitations and event content with the recipients you designate, including through email, text message, or shared private URL. RSVP information submitted by guests is made available to the host of the corresponding event.

4.3 Legal Disclosures

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect against harm to the rights, property, or safety of TinselVite, our users, or the public.

4.4 Business Transfers

If TinselVite is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, information may be transferred as part of that transaction. We will notify you and provide a choice if your information will become subject to a materially different privacy policy as a result of the transaction.

5. Children’s Privacy and Parental Consent

The Service is intended for users thirteen (13) years of age and older. Users between thirteen (13) and seventeen (17) years of age may use the Service only with verifiable consent from a parent or legal guardian. By permitting a minor to use the Service, the parent or legal guardian accepts this Privacy Policy on the minor’s behalf and assumes responsibility for the minor’s use.

We do not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have collected personal information from a child under thirteen, we will delete that information promptly. A parent or legal guardian who believes a child under thirteen has provided us with personal information may contact us at legal@tinselvite.com.

6. Data Retention

We retain personal information for the periods set forth below, except where a longer period is required or permitted by applicable law.

(a) Active accounts. We retain account data and associated content for so long as the account remains active.

(b) Inactive accounts. Accounts with no login activity for twenty four (24) consecutive months are considered inactive. We will send a notification email to the address on file and, if no login activity occurs within thirty (30) days after the notification, the account and associated data will be deleted.

(c) Account deletion. When you delete your account, we permanently delete the account and associated content within thirty (30) days, and we purge backup copies within ninety (90) days.

(d) Inspiration uploads. Reference and inspiration images uploaded for AI generation are deleted within thirty (30) days after the related invitation is finalized.

(e) Event data and guest information. Event data and guest contact information are deleted ninety (90) days after the scheduled event date, unless the host maintains the event as active.

(f) Analytics and log data. Retained in aggregated or pseudonymized form for up to twelve (12) months.

(g) Legal holds. We may retain information longer than the periods stated above where necessary to comply with legal obligations, resolve disputes, prevent fraud, enforce our agreements, or as otherwise permitted by applicable law.

7. Your Rights and Choices

7.1 In-Application Controls

You may access, review, update, or delete your account information through the Service. We provide an in-application data export tool that, upon your request, delivers a copy of your account data in a portable format to the email address associated with your account.

7.2 European Economic Area, United Kingdom, and Swiss Residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights, subject to applicable limitations: (a) the right of access to personal data we hold about you; (b) the right to request correction of inaccurate personal data; (c) the right to request erasure of personal data; (d) the right to restrict or object to processing; (e) the right to request data portability; and (f) where processing is based on consent, the right to withdraw consent at any time.

Our legal bases for processing your personal data include: performance of the contract under which we provide the Service to you; our legitimate interests in operating, securing, and improving the Service; compliance with our legal obligations; and, where applicable, your consent. You have the right to lodge a complaint with the data protection authority in your country of residence.

7.3 California Residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”), provides specific rights regarding your personal information. Subject to applicable limitations, you have the right to:

(a) know the categories and specific pieces of personal information we have collected, the sources of that information, the purposes for which we collected it, and the categories of third parties with whom we have shared it;

(b) request a copy of your personal information in a portable format;

(c) request deletion of personal information we have collected from you;

(d) request correction of inaccurate personal information;

(e) opt out of the sale or sharing of personal information; and

(f) limit the use and disclosure of sensitive personal information.

We do not sell personal information, and we do not share personal information for cross context behavioral advertising. We will not discriminate against you for exercising any right under the CCPA.

7.4 How to Exercise Your Rights

To exercise any of the rights described in this Section 7, email legal@tinselvite.com from the email address associated with your account or use the in-application data export and deletion tools. We may require verification of your identity before responding to a request. We will respond to verifiable requests within the timeframes required by applicable law.

7.5 Authorized Agents

California residents may designate an authorized agent to make a request on their behalf. We will require written proof of authorization and may require the resident to verify their identity directly with us.

8. Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. These safeguards include encryption in transit, access controls, and routine security reviews. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or from the Service. You are responsible for maintaining the confidentiality of your login credentials and for any activity that occurs under your account.

9. International Data Transfers

We are headquartered in the United States. Information we collect may be transferred to, stored in, and processed in the United States or in other countries where our service providers operate. By using the Service, you understand that your information may be transferred to countries that may not have the same data protection laws as your country of residence. Where required by law, we rely on appropriate transfer mechanisms, including the Standard Contractual Clauses approved by the European Commission, and we take measures to ensure that personal information receives an adequate level of protection.

10. Cookies and Similar Technologies

The mobile application uses local storage and similar technologies to maintain session state, remember preferences, and analyze usage. The companion web pages used for guest invitation viewing may use limited cookies solely for session functionality. We do not use third party advertising cookies or tracking technologies, and we do not engage in cross site tracking.

11. Third Party Links and Services

The Service may contain links to third party websites or services that we do not own or control. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this Privacy Policy and, for material changes, provide additional notice through the Service or by email to the address associated with your account. Your continued use of the Service after a change becomes effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact us at: