Courtesy translation. This English version is provided for convenience only. The legally binding version is the Spanish one; in the event of any discrepancy, the Spanish text prevails.
1. Data controller
The controller of your personal data is Andes Software S.L. (hereinafter, "FastInvit"), tax ID B26651216; its full details are in the Legal Notice. You can contact us at legal@fastinvit.es.
2. What data we process and for what purpose
We process the data you provide to us and the data generated by your use of the service. The purposes and legal bases are:
| Data | Purpose | Legal basis |
|---|---|---|
| Registration data: name, email address and password (stored encrypted). | Create and manage your account; authenticate you. | Performance of the contract. |
| Google sign-in data (OAuth): email, name and account identifier. | Enable signing in with Google. | Performance of the contract. |
| Your event content: text, dates, locations and images you upload. | Provide the invitation creation and publishing service. | Performance of the contract. |
| Guest data (RSVP): first name, last name, ID number and answers to the questions set by the organiser. | Manage attendance confirmations for the event. | See section 4 (guest data). |
| Payment data: billing email, country and Stripe customer identifier. We do not store your card details, which are handled directly by Stripe. | Process purchases and issue the corresponding invoices. | Performance of the contract and legal obligation. |
| Technical data: IP address (in system logs and in the record of the withdrawal waiver when publishing) and basic browsing data. | Security, fraud prevention and legal record of transactions. | Legitimate interest and legal obligation. |
Marketing communications (news, promotions) will only be sent if you give your consent; you may withdraw it at any time.
The buttons in our campaign emails go through a fastinvit.es link: when you click one, we record the date of the click to learn which emails are useful to you and, if you make a purchase within the following 30 days, we link that purchase to the email. We don't use open-tracking pixels or cookies for this, nothing is shared with third parties, and you can stop it by unsubscribing with the link included in every email. The legal basis is our legitimate interest in measuring how effective our communications are.
Affiliate program
If you sign up as an affiliate, we process your identification and contact details (name and email address), tax details (company name or full name, Spanish NIF, DNI or NIE, or your country's tax ID, tax address, country of tax residence and how you take part: company, self-employed or private individual), payout details (IBAN and account holder, or your PayPal account email), the invoices and tax residency certificates you upload, your payout statements and your account's activity in the program (clicks aggregated by day, referred customers, sales and commissions). We use them to manage your participation, calculate and pay your commissions, apply the withholdings required by law and meet our accounting and tax obligations. The legal basis is the performance of the contract and compliance with legal obligations. Your tax ID and payout account are stored encrypted. To pay you, your payout account is shared with our bank or with PayPal, and, as required by law, we report to the Spanish Tax Agency the payments we make to you and the withholdings applied, with your identification and tax details. If you leave, we delete your payout details and your address, but keep your tax details, payout requests, invoices, statements and residency certificates for the periods required by commercial and tax law.
If you arrive at FastInvit through an affiliate's link or code, we store in your account which affiliate referred you (an internal identifier) and since when, so that we can pay them the commission on your purchases during the following 12 months. The legal basis is our legitimate interest in rewarding those who recommend us. The affiliate never sees your name, email or country: only the date, the pack, the price region and their commission for each sale.
3. Processors
To provide the service we rely on suppliers that process data on behalf of FastInvit, under the corresponding data processing agreement:
- Stripe — payment processing and invoicing.
- Brevo — sending transactional emails (verification, password recovery, service notices).
- Google — sign-in via OAuth.
- Hostinger — hosting of the application and the data.
Some of these suppliers may carry out international data transfers; where that happens, the appropriate safeguards provided for in the GDPR apply (standard contractual clauses or other valid mechanisms).
4. Guest data (RSVP)
When you create an event and collect attendance confirmations, you are the controller of your guests' personal data, and FastInvit acts as the processor hosting them on your behalf. You are responsible for informing your guests about this processing.
Any guest may request access to or erasure of their data by contacting the event organiser or writing to us at legal@fastinvit.es, in which case we will pass the request on to the relevant organiser.
5. Data retention
We keep your account data for as long as the account remains active. Invitations follow their own life cycle: they expire at the end of the event date and, after expiry, are kept for a retention period of 6 months; once that period ends they are deleted permanently and irreversibly together with their content and the associated guest data (data minimisation). Billing data is kept for the periods required by tax and commercial legislation.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to legal@fastinvit.es. If you believe the processing does not comply with the applicable rules, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).
7. Cookies and audience measurement
FastInvit uses strictly necessary technical cookies for the site to work (session handling and security), which are exempt from the consent requirement under the applicable rules, and — only if you allow it — the advertising cookies described in section 7.1.
To find out how many people visit the site we use a first-party audience measurement tool (Umami) hosted on our own servers. It sets no cookies, creates no persistent identifiers, does not track your browsing across other websites and does not build profiles: it only produces aggregate statistics (page views, country, device type, referring site). The data is not shared with third parties and never leaves our infrastructure. Given these characteristics, this processing does not require your prior consent.
7.1 Advertising and campaign measurement (Google Ads)
We advertise FastInvit on Google. To know which ads lead to sign-ups and purchases — and to stop paying for the ones that don't — we use the Google Ads tag, which sets cookies in your browser. This tag loads only on FastInvit's own pages: the invitations published by our customers, which is what their guests see, never include it.
If we detect that you are in the European Economic Area, Switzerland or the United Kingdom, the tag starts switched off and we ask for your permission through a banner: until you accept, no advertising cookie is written and no identifier of yours is stored. The data processed is the identifier of the click that brought you from the ad, the pages you visit within the site and, if you complete a purchase, its amount, currency and order number.
When you buy and have given us your permission, we also send Google an encrypted, irreversible version of your email address (a SHA-256 digest, computed on our server) so that it can match the purchase to the ad that led to it. Your email is never sent in readable form, and we neither collect nor provide your phone number for this purpose. The recipient is Google Ireland Limited, which processes this data under its own terms and may transfer it to the United States under the EU-U.S. Data Privacy Framework. The legal basis is your consent.
Referrals from our affiliates
If you arrive at FastInvit through an affiliate's link, we remember which affiliate referred you so that we can pay them their commission if you sign up or buy. During your visit we keep it in the session (technical, it disappears when you close your browser). It may also be kept for 90 days in the fi_ref cookie, which only contains an internal identifier of the affiliate: in the European Economic Area, Switzerland and the United Kingdom, only if you accept it in the cookie banner; in other countries, directly.
8. Approximate geolocation from your IP address
To show prices in your region's currency and to comply with the tax obligations that apply to us, we infer your country from your IP address. The lookup runs on our own servers, against a local database (MaxMind's GeoLite2): your IP address is not sent to any third party for this purpose. Only the country is determined — never a precise location — it is kept for the duration of your browsing session and, if you make a purchase, stored alongside that purchase record. The legal basis is our legitimate interest in applying the correct price, and compliance with our legal obligations.
9. Minors
The service is not aimed at minors. By registering you declare that you are of legal age and have the legal capacity to enter into contracts.