Privacy Policy

Last updated: March 15, 2026

InvitePal (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

Account Information

When you create an account, we collect your email address and a hashed version of your password. We never store your password in plain text.

Usage Data

We collect anonymized usage data such as the number of invitations sent, automations created, and feature usage. This helps us improve the product and monitor plan limits.

What We Do Not Collect

  • Your Facebook password or login credentials
  • Your Facebook friends list or personal messages
  • Browser history or activity outside of InvitePal

2. How the Chrome Extension Works

InvitePal runs entirely within your browser. When you use the extension, it interacts with Facebook pages in your active browser session. Invitation actions are performed locally through your browser — we do not proxy your Facebook session through our servers.

3. How We Use Your Information

  • To provide and maintain the InvitePal service
  • To manage your account and enforce plan limits
  • To send transactional emails (password resets, account notifications)
  • To improve and develop new features

4. Data Storage & Security

Your account data is stored in a secure PostgreSQL database hosted on Neon (US-East). Passwords are hashed with bcrypt. All data is transmitted over HTTPS. We do not sell, rent, or share your personal information with third parties.

5. Cookies

We use a single session cookie (ji_session) to keep you logged in to the web dashboard. We do not use tracking cookies or third-party analytics.

6. Third-Party Services

We use the following third-party services to operate InvitePal:

  • Neon — database hosting
  • Vercel — web application hosting
  • Workspace SMTP — transactional email delivery

These services have their own privacy policies. We only share the minimum data necessary for them to provide their services.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your data in a portable format

To exercise any of these rights, contact us at support@yourmarketingpal.com.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

9. Children's Privacy

InvitePal is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the dashboard. Continued use of InvitePal after changes constitutes acceptance.

11. Contact

For questions about this Privacy Policy, contact us at support@yourmarketingpal.com.