Privacy Policy

FamInvite is a shared directory, calendar, and booking tool for extended families. This policy explains what information we collect, how we use it, who can see it, and how to have it removed. It applies to the FamInvite website and to the emails we send.

Information we collect

Account information. If you sign in, our authentication provider (Clerk) collects your name and email address, and, if you sign in with Google, the basic profile information Google shares with us. We do not store passwords.

Family directory information. Members of a family group may add relatives to that group’s directory: names, household and mailing addresses, phone numbers, email addresses, birthdays, anniversaries, relationships, and photos. This information is entered by family members, and may include information about relatives who have not used FamInvite themselves.

Booking information. When you request a stay at a shared place, we collect your name, email address, optional phone number, the dates requested, and any note you include. We record who approved or declined each request and when.

Waitlist and invitations. If you join the waitlist or are invited to a group, we store the name and email address provided.

Technical information. We keep short-lived rate-limit records keyed by IP address and email address to prevent abuse of the public request form, and standard server logs needed to run and secure the service. We do not use advertising trackers.

How we use it

• To run the family directory, birthday calendar, and booking calendar for your group.
• To send transactional email: booking verification links, approval decisions, invitations, and reminders. We do not send marketing email.
• To let family managers review and approve stay requests.
• To prevent abuse and keep the service secure.

Google user data and Google Calendar

FamInvite can sync your family group’s birthdays, anniversaries, and events into a Google Calendar you choose. If you connect a Google account for this, we request permission to view your calendars and to create, update, and delete events in the calendar you select.

We use this access only to:

• list your calendars so you can pick the one to sync to;
• create, update, and remove the FamInvite events in that calendar so it matches your family directory.

We store the Google account email, the ID of the calendar you chose, a refresh token so the sync can keep running, and the IDs of the events we created so we can update or remove them later. We do not read, store, or copy other events in your calendars, and we do not use Google data for advertising, to build profiles, or for any purpose other than the sync you set up.

FamInvite’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time from your group’s calendar settings, or by removing FamInvite at myaccount.google.com/permissions. When you disconnect, we delete the stored refresh token and stop syncing. Events already in your calendar stay unless you choose to remove them.

Who can see your information

Directory information is visible to the members of the family group it belongs to. Booking calendars for a shared place are visible to anyone with that place’s link, so relatives can book without an account; they show dates and family branch, not contact details. Managers of a group can see the details of requests made to it.

We do not sell personal information, and we do not share it with third parties except the service providers below, or when required by law.

Service providers

• Clerk — sign-in and account management.
• Convex — database and file storage, hosted in the United States.
• Vercel — website hosting.
• Resend — delivering the emails we send.
• Google — calendar sync, only if you connect it.

Each provider processes data only to provide its service to us.

Retention and deletion

We keep information for as long as it is part of an active family group or booking history. A group manager can remove any person from the directory, and you can ask us to remove you from any group, delete your account, or delete a relative’s information you entered. Email hello@faminvite.com and we will respond within 30 days. Rate-limit records expire automatically.

Security

Data is encrypted in transit and at rest by our providers. Sign-in is passwordless by design. Booking links carry unguessable tokens, and actions taken through them are verified by email.

Children

Family directories naturally include children, entered by their relatives. FamInvite accounts are for adults; we do not knowingly let anyone under 13 create an account. A parent or guardian can ask us to remove a child’s information at any time.

Changes

If we change this policy in a way that matters, we will update the date above and, for significant changes, email account holders.

Contact

Questions about privacy: hello@faminvite.com. See also our Terms of Service.