InvyteOut Privacy Policy

InvyteOut, Inc. (“InvyteOut,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy (“Policy”) describes how we collect, use, share, and protect your information when you use our InvyteOut platform (the “Services”), including our mobile application (the “App”) and the web-based platform at InvyteOut.com (the “Webapp”), which helps users coordinate gatherings, meet-ups, private messaging, and interact with the InvyteOut Business Network through reviews and ratings. The minimum age of account holders is 13 years old. For more on our eligibility and use requirements for minors, please see the section “Users 13 and Older” below.

By using the Services, you consent to the practices described in this Policy. If you do not agree with this Policy, please do not use the Services. This Policy is incorporated into and forms part of our Terms of Service.

We may update this Policy from time to time. We will notify you of material changes via in-App/Webapp notification or email. Continued use of the Services after such changes constitutes your acceptance of the revised Policy.

We collect only the minimal information necessary to provide and improve the Services. Our collection practices are limited as follows:

Personal Information: Your Account. When you create an Account, we collect your email address (your primary identifier, which cannot be removed or changed) and phone number (which may be updated but cannot revert to a previous number). This is required for verification, contact integration, and Account management.

Profile Name.You provide a name to be displayed on your profile, which can be your real name or an alias of your choice. To other users, the Services will display your name according to what is in their phonebook if you are saved in their contacts. In instances where you are not in the user’s phonebook, your profile name will be displayed. This displayed name (from phonebook or profile) is visible to other users in the Services (e.g., in connections, messages, reviews, or ratings) but is not used for identification beyond the Services’ social features.

No Other Personal Information. We do not collect any other personal information, such as address, date of birth, or payment details.

Non-Personal and Temporary Information

• Phone Contacts.The App requires access to your device’s phonebook (contacts) to facilitate connections with trusted individuals, e.g., those in your contact list, which it mirrors within the App. We temporarily access this data solely for this purpose and do not store, upload, or share it beyond the immediate interaction. User contact lists are stored locally within the App and are temporarily mirrored and used by the App, but not permanently stored. Only phone numbers without corresponding contact names are stored on our servers.
• Location Data. With your consent, we access temporary, real-time location data via device location services for verification purposes only (e.g., confirming proximity during in-person check-in/out at business locations). This data is deleted immediately after use and is not stored in our database.
• Technical and Device Information. We collect non-personal device data, such as browser and device information, analytics and telemetry, security and access logs, operating system, IP address (anonymized), and Services usage patterns, to ensure functionality and security. When accessing via the Webapp at InvyteOut.com, this may include browser type and related non-personal data.
• User Content. Reviews, ratings, messages, and other content or information you submit (e.g., on businesses in the InvyteOut Business Network), including photos or images of businesses, events, or locations. Other information may include user prompts, uploads, inputs, text, files, metadata, and user logs. By submitting such content, you grant the permissions described in our Terms of Service and End-User License Agreement, which may allow display to and limited use by featured businesses or other users in the network. Photos may include visual information about locations or identifiable individuals; we do not use them for tracking or unrelated purposes.

We do not collect sensitive information (e.g., health, financial, or biometric data) or track your activity across third-party sites or apps.

We use the collected information solely to:

• Provide and maintain Services, including Account creation, verification, connections, messaging, gatherings, check-ins, reviews, ratings, and photo display.
• Display names to other users based on their phone contacts (if available) or your chosen profile name to enhance trusted connections.
• Verify user proximity for in-person features (primarily mobile).
• Facilitate interactions with the InvyteOut Business Network (e.g., enabling good-faith reviews and ratings, and displaying user-submitted photos, receiving and redeeming offers).
• Track and manage rewards systems such as iO Coin earnings, balances, and redemptions for promotions.
• Send transactional communications (e.g., login confirmations, password resets) via email.
• Display anonymized, aggregated Ads and promotions from us or our business network, based on general usage patterns (not personal data).
• Improve the Services, detect abuse, and ensure security (e.g., preventing fraudulent logins or review bombing).
• Comply with legal obligations.

We process data on servers in the United States and do not use it for automated decision-making that significantly affects you.

We do not sell, rent, or share your personal information with third parties, including advertisers or businesses on our network. Limited disclosures occur only as follows:

• Service Providers. To trusted third-party vendors (e.g., cloud hosting, analytics tools) who assist with Services operations, under strict confidentiality agreements. These providers do not use your data for their own purposes.
• Business Network Interactions.Reviews, ratings, and user-submitted photos are publicly visible on the Services and may display your profile name (or phonebook name if applicable in user interactions), but no other personal information (e.g., email or phone) is shared with businesses. Other users’ account-linked emails will not be displayed to anyone unless they are already contained in the user’s phonebook.
• Legal Requirements. If required by law, subpoena, or government request, or to protect our rights, safety, or property.
• Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Ads are served using anonymized, aggregated data only; no personal information is shared.

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or misuse. This includes encryption for data in transit, secure storage, and access controls. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your Account credentials confidential.

Data Retention. We retain personal information only as long as necessary for the purposes described (e.g., email, phone number, and profile name for Account management) or as required by law. Upon Account termination, we delete your data promptly (subject to legal retention).

You have control over your information:

• Access and Update. View or update your phone number and profile name via Services settings (note: email cannot be changed). Account access and updates are available via both the mobile App and Webapp at InvyteOut.com where supported.
• Consent Withdrawal. Disable location services on your device to revoke location consent (may limit features). Opt out of promotional Ads through Account settings.
• Deletion. Request deletion of your Account and data by contacting us (subject to legal holds).
• Do Not Track.We do not respond to browser “Do Not Track” signals but honor opt-outs where applicable.

California Residents.The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”), applies only to certain businesses that meet specific statutory thresholds. Based on our current data collection and processing activities, we do not meet those thresholds, and the CCPA does not presently apply to our operations. We continue to evaluate our practices and, should the CCPA become applicable to us in the future, we will update this Privacy Policy to reflect any new rights or obligations.

Nevada Residents.We do not currently meet the statutory definitions that would classify us as a “data broker” or otherwise bring us within the scope of Nevada’s privacy laws governing certain types of personal information sales. As a result, Nevada’s consumer privacy rights provisions do not apply to our data practices at this time. Should our activities change such that Nevada’s privacy requirements become applicable, we will revise this Privacy Policy accordingly.

Other U.S. States. The privacy laws of several states, including Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Kentucky, Rhode Island, Oregon, Texas, Tennessee, Montana, South Dakota, New Jersey, Delaware, Maine, Arizona, Arkansas, and Florida, provide residents with certain rights related to the processing of their personal data. Our business meets the applicability thresholds of these laws because we conduct business in these states, collect personal data from their residents, and process personal data in quantities that meet or exceed the statutory thresholds for covered entities.

Although we do not sell or share personal data for monetary consideration or for targeted advertising within the meaning of these state laws, and we do not process categories of data defined as “sensitive personal data,” we do engage in targeted advertising, cross‑context behavioral advertising, and certain forms of profiling. As such, we comply with the obligations imposed on controllers under these state privacy statutes.

Your Rights

Residents of these states may have the right to:

• Access the personal data we maintain about them.
• Correct inaccuracies in their personal data.
• Delete personal data they have provided to us or that we have obtained about them.
• Receive a copy / portability of certain personal data in a usable, portable format.

Opt out of:

• targeted advertising;
• profiling in furtherance of decisions that produce legal or similarly significant effects;
• the sale of personal data (noting that we do not engage in such sales).

Some states also allow residents to appeal our response if we deny a rights request.

Our Responsibilities as a Data Controller

To comply with these state laws, we:

• Provide clear disclosures about our data collection and use practices;
• Limit data processing to what is adequate, relevant, and reasonably necessary for disclosed purposes;
• Implement reasonable administrative, technical, and physical security measures to protect personal data;
• Perform assessments when engaging in certain processing activities, such as targeted advertising or profiling that may pose a heightened risk of harm;
• Respond to consumer privacy rights requests within the timelines required by applicable laws; and
• Refrain from processing “sensitive personal data,” as defined by these laws, unless required by law or authorized by the consumer (which we do not currently do).

EEA Residents

At this time, we do not intentionally collect personal data from individuals in the European Economic Area (“EEA”). Because our activities do not involve the targeted offering of goods or services to EEA residents, nor the monitoring of their behavior within the EEA, the GDPR and related data protection laws do not currently apply to our processing activities. Nevertheless, if you reside in the EEA and believe we have collected personal data about you, you may contact us to request deletion or correction. While we are not legally obligated to do so under the GDPR, we will use reasonable efforts to respond in a manner consistent with our commitment to responsible data practices.

Use or Access Outside of the United States

If you access or use the Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States. The data protection and privacy laws of the United States may offer a different level of protection than the laws in your country of residence. By using the Services, you acknowledge and consent to the transfer of your information to the United States and to the processing of your information in accordance with this Privacy Policy.

Submitting a Request

Residents of the jurisdictions listed above may submit a request to exercise their privacy rights by contacting us via email at Info@InvyteOut.com. We will authenticate and respond to requests in accordance with the requirements of the applicable privacy laws. If we decline to act on your request, you may have the right to appeal our decision; we will provide instructions on how to submit an appeal at that time.

Our Services are intended for individuals 13 years of age or older. We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information and terminate the associated account.

If you are between the ages of 13 and 17 (a “Minor”), you may use the Services only with the permission of your parent or legal guardian. By allowing a Minor to use the Services, the parent or legal guardian consents to our collection, use, and processing of the Minor’s personal information in accordance with this Privacy Policy.

Parents or legal guardians of users aged 13–17 may contact us at info@invyteout.com to:

• request access to their Minor’s personal information,
• request correction or deletion of such information, or
• withdraw consent for the Minor’s continued use of the Services.

If consent is withdrawn, we may suspend or delete the Minor’s account consistent with our Terms of Service.

We prohibit children under 13 from using the Services. If you believe a child under 13 has created an account or provided personal information to us, please contact us immediately at info@invyteout.com so we can take appropriate action.

The Services may contain links to third-party sites or services (e.g., email providers for verification). We are not responsible for their privacy practices. Review their policies before providing information.

If you have questions about this Policy, your data, or privacy concerns, please contact our Data Protection Officer at:

InvyteOut, Inc.
Puyallup, Washington
Email: Info@InvyteOut.com

Thank you for trusting InvyteOut with your information. We value your privacy and are dedicated to transparency.