FestaLink
FestaLink logo

Privacy Policy for FestaLink

Last Updated: 25 October 2025

Welcome to FestaLink! This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and service (the "Service") available at https://festalink.com.

Please read this policy carefully. By using FestaLink, you consent to the practices described herein.

1. Information We Collect

a) Information You Provide Directly:

  • Card Content: The information you input to create your virtual invitation, including the avatar design, the host child's name, event type, custom message, event location (optional), Google Maps link (optional), date, and time.
  • Contact Information: Your email address, which is required to send you the shareable link and personal token.
  • Technical Preferences: Data stored locally in your browser's localStorage (e.g., avatar preferences, chosen theme, and form data) to facilitate your creation process for up to 24 hours.

b) Information Collected Automatically:

  • Technical Data: We use third-party services that may collect anonymous data such as your IP address, browser type, and usage patterns. This is done via:
    • Simple Analytics: To understand overall traffic and usage trends in an anonymous, privacy-friendly manner.
    • Vercel: Our hosting provider, which collects necessary data for the operation and security of the platform.
    • Google reCAPTCHA: To protect our card management system from automated attacks and abuse. This service analyzes interaction patterns to distinguish humans from bots.
  • Location Data: We use your IP address to determine your country via a third-party API (https://ipwho.is/) solely to present the appropriate payment gateway (Mercado Pago for Brazil, Stripe for others). We do not store your precise location.

c) Payment Information:

We do not collect or store any sensitive payment information (e.g., credit card numbers). All payments are processed directly by our third-party payment processors:

  • Mercado Pago (for users in Brazil)
  • Stripe (for users outside Brazil)

Your interaction with these processors is governed by their respective Privacy Policies.

2. How We Use Your Information

We use the information we collect to:

  • Create, provide, and maintain the Service.
  • Process your transaction and manage your payment.
  • Send you an automated email containing your shareable link and personal token.
  • Display your virtual invitation to guests who use the shareable link.
  • Allow you to edit or delete your invitation using your personal token.
  • Analyze anonymous usage data to improve our Service.
  • Provide customer support.

3. Data Storage, Retention, and Deletion

We are committed to data minimization.

  • Email Address: Your email address is stored temporarily only until a successful payment is confirmed. Once the automated email is sent (or if the payment is pending for over 24 hours), your email address is permanently deleted from our records.
  • Card Data: The data of your virtual invitation is automatically and permanently deleted from our database one day after the event date you specified.
  • Manual Deletion: You can permanently delete your invitation and all associated data at any time from the "Manage my card" page.
  • Anonymous Analytics: Anonymous usage data is retained for internal analysis to help us improve the service.

4. Data Security

We implement reasonable security measures to protect your data. Sensitive optional fields (location and map link) are encrypted in our database. Access to the full card data is restricted and requires either the unique shareable link or your personal token.

Warning: Please be aware that the shareable link grants access to anyone who possesses it. You are responsible for sharing this link only with trusted guests.

5. Third-Party Services

We use third-party services to operate FestaLink. These parties have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for other purposes.

  • Supabase: Cloud database (data storage).
  • Vercel: Application hosting.
  • Mercado Pago & Stripe: Payment processing.
  • Resend: Transactional email delivery.
  • Simple Analytics: Anonymous website analytics.
  • Google reCAPTCHA: Security and bot protection.

We recommend you review the Privacy Policies of these third parties. Google's Privacy Policy and Terms of Service apply to reCAPTCHA usage.

6. Your Rights

You have the right to:

  • Access and Correction: Access the data in your invitation and correct it via the "Manage my card" page. Please note that you may edit your invitation content only once after its creation. This limitation is displayed to you before confirming any changes.
  • Deletion: Delete your invitation and all associated data at any time, as described above.
  • Contact Us: If you have any questions about your data, you can contact us at hello.festalink@gmail.com.

7. International Data Transfers

Our service providers (e.g., Vercel, Supabase, Stripe) may be located in countries outside your own. By using FestaLink, you consent to the transfer of your information to these countries, which may have data protection rules different from your country.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello.festalink@gmail.com.