Privacy policy

Last updated: 19 September 2026

What we collect

• Account: your email address and name (from Google sign-in or email code).
• Invitation content: the details, photos and music you add to a card.
• Guest RSVPs: the name, attendance and optional message a guest submits on a card. Guests' data is visible only to the card owner.
• Usage: page views on published cards (counts and referrer only), payment references for manual transfers.

How we use it

To render and host your invitation, to confirm payments, to show you RSVPs, and to send transactional emails (sign-in codes, RSVP notifications). We do not sell personal data or use it for advertising.

Sharing

Published invitations are visible to anyone with the link and are marked noindex so search engines do not list them. We use hosting, storage, email and card-payment providers who process data on our behalf.

Retention

Cards and their RSVPs are kept for the plan period plus 90 days, then deleted. Unpublished drafts are removed after 90 days of inactivity. You can delete an invitation from your dashboard at any time.

Your rights

Email hello@cardly.pk to access, correct or delete your data.