Legal

Privacy policy

Last updated: 28 October 2026 · This is a courtesy translation. In case of any discrepancy, the Spanish version prevails.

1. Data controller

Tres Más Tres Soluciones, S.L.
Tax ID (NIF): B88471032
Registered address: Calle de Guillermo Pingarrón, 1, Local 10, 28018 Madrid, Spain
Contact: [email protected]

2. EasyInvite's dual role

EasyInvite acts in a dual capacity with regard to data protection:

• Data controller for the data of event organisers (registration, purchase and billing data).
• Data processor for the guest data that the organiser enters into the platform. In this case, the organiser is the controller of their guests' data and is responsible for ensuring a legal basis for its processing.

3. Data we process

Organiser data:

• Identification data: first name, last name, email address.
• Purchase and payment data: processed through Stripe (we do not store card details).
• Platform usage data and activity logs.

Guest data (processed as a processor):

• Guest name.
• Phone number (to send the invitation via WhatsApp).
• RSVP and number of companions.
• Messages posted to the event wall (voluntary).

4. Purposes and legal bases

Purpose	Legal basis
Providing the contracted service	Performance of a contract (Art. 6.1.b GDPR)
Payment management	Performance of a contract
Sending invitations to the organiser's guests	Organiser's legitimate interest / consent
Service-related communications	Legitimate interest (Art. 6.1.f GDPR)
Compliance with legal obligations	Legal obligation (Art. 6.1.c GDPR)

5. Data retention

• Organiser data: for the duration of the contractual relationship and 5 further years to comply with legal (tax and commercial) obligations.
• Guest data: kept active for 1 year from the event date. After that period, the data may be deleted.
• Activity logs: 2 years.

6. Recipients and sub-processors

EasyInvite uses the following service providers, which act as sub-processors with the corresponding GDPR safeguards:

Provider	Function	Location
Turso (ChiselStrike)	Database	EU / USA (SCC)
Stripe	Payment processing	USA (SCC)
Railway	Infrastructure and hosting	USA (SCC)
Twilio	WhatsApp message delivery	USA (SCC)
Meta / WhatsApp Business API	Message delivery	USA (SCC)
Resend	Service emails (order confirmation, account access and notices)	USA (SCC)

We do not disclose personal data to third parties except where required by law or with the data subject's express consent.

7. International transfers

Some of our providers are located outside the European Economic Area (EEA). In these cases, transfers are made under the Standard Contractual Clauses (SCC) approved by the European Commission, which provide appropriate safeguards.

8. Security measures

EasyInvite applies appropriate technical and organisational measures to protect personal data:

• Encrypted communications via HTTPS/TLS.
• Passwords stored with bcrypt hashing.
• Role-based and per-event access control.
• Audit logs of actions on sensitive data.
• Access to data restricted to strictly necessary staff.

9. Data subjects' rights

Data subjects may exercise the following rights against EasyInvite at any time:

• Access: obtain confirmation of whether we process their data and a copy of it.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of their data when it is no longer necessary.
• Restriction: request restriction of processing in certain cases.
• Portability: receive their data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise these rights, write to [email protected] stating your identity and the right you wish to exercise. We will reply within 30 days at most.

If you believe the processing does not comply with current regulations, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

10. Cookies

EasyInvite only uses technical session cookies, which are necessary for the service to work. We do not use tracking or advertising cookies. Consent is not required for these cookies under Article 22.2 of the Spanish Information Society Services Act (LSSI-CE).

11. Changes

EasyInvite may update this policy to reflect changes in legislation or in the service. Significant changes will be communicated sufficiently in advance. The current version will always be available at easyinvite.co/privacidad.

12. Contact

For any question about privacy or data protection: [email protected]