Privacy Policy
This policy explains what personal data invme collects, why, how long we keep it, who we share it with and what you can do about it. We wrote it to be read, not to be skimmed past: if anything is unclear, write to [email protected].
1. Who is responsible
invme is operated by Invme LLC ("invme", "we", "us"). We are the controller of the personal data described in this policy. For anything related to your data, write to [email protected].
2. What we collect
- Account and profile. Your e-mail address, password (stored only as a one-way hash), name, date of birth (to confirm you are 18 or older), gender, city, profile photos, a short description, your interests, the links to your social profiles you choose to add, your language and your settings.
- Sign-in with Google, Facebook or VK. If you choose it, we receive from that provider your account identifier, name, e-mail address and profile picture. We never see your password with that provider.
- What you create. Plans, comments, messages, photos, reviews, trips, your "I'm going" answers, bookmarks, the people and cities you follow, and the reports you send us.
- How you use invme. Which pages and features are used, which forms fail or are left unfinished, and errors. These statistics are counted without cookies: we use a key derived from your IP address and browser that changes every day and is never stored as such. When you are signed in, these events are linked to your account so that we can fix what does not work for you.
- Technical data. Your IP address, browser and device type and the time of each request reach our servers and our network provider; we use them to deliver pages, protect the service and investigate faults.
- Location. The city you choose. Your device's location only when you tap a "near me" control: it is used for that one request and is not stored as a history.
- Payments. If you buy invme Plus or a promotion, the payment is handled by Stripe. We receive the status, amount and reference of the payment — never your card number.
- Communication. The e-mails you send us and the e-mails we send you.
3. Places and events from public sources
invme shows a guide to venues, places and events compiled from public sources: the websites of venues and organisers, their public social media posts and public review platforms. It can include the names of organisers, performers and businesses and their public profile names. We use this information to tell people what is on and where (our legitimate interest in providing a public guide). If you are mentioned and want something corrected or removed, write to [email protected] and we will act on it promptly.
4. Why we use your data and on what basis
- To provide the service you signed up for — your account and profile, plans, chat, notifications, the places and events near you. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
- To keep invme safe — checking the minimum age, reviewing reports, preventing spam, fraud and abuse, limiting repeated sign-in attempts. Legal basis: our legitimate interests and the legitimate interests of our users (Art. 6(1)(f)) and, where applicable, legal obligations (Art. 6(1)(c)).
- To improve invme — usage statistics without cookies and error reports. Legal basis: legitimate interests.
- To personalise what you see — your feed and recommendations based on your interests and activity. Legal basis: our contract with you; you can change your interests at any time.
- To write to you — service e-mails (confirmations, password resets, messages and replies) as part of our contract; digests and reminders based on our legitimate interests, with a one-click unsubscribe link in every one of them; push notifications only if you allow them in your browser or app (consent, Art. 6(1)(a)), which you can withdraw at any time.
- To take payments and keep accounting records — contract and legal obligations.
- To comply with the law and answer lawful requests of authorities — legal obligations.
We do not sell your personal data. We do not show third-party advertising and do not use advertising cookies. We do not make decisions that have legal or similarly significant effects on you by automated means alone.
5. What other people see
Your profile is visible according to your visibility setting: to everyone, to signed-in users only, or to nobody but you. Plans you publish and the comments you write are public and may appear in search engines. Messages are seen only by the people in the conversation. You can block anyone; a blocked person no longer sees your profile and cannot write to you. With invme Plus you can hide your age.
6. Who we share data with
We share personal data only with the service providers who help us run invme, under contracts that oblige them to protect it and to use it only on our instructions, and only to the extent each of them needs:
- Hetzner Online GmbH (Germany) — the servers and databases where invme and your data are stored.
- Cloudflare, Inc. — delivery of the site and protection against attacks; all traffic to invme passes through Cloudflare.
- Google LLC — delivery of our e-mails; and Google sign-in if you use it.
- Meta Platforms (Facebook Login) and VK (VK ID) — only if you choose to sign in with them.
- Stripe — payments, if you buy something.
- CARTO — the map images on our maps: your browser loads them from CARTO, which therefore sees your IP address.
- YouTube and Vimeo — only when a page shows a video and you play it.
- Anthropic — machine translation of the public descriptions of events and places; no account data is sent.
We also disclose data to authorities when the law requires it, and to a successor if invme is merged or sold, who will remain bound by this policy.
7. Transfers outside Europe
Your data is stored in Germany. Some of the providers above (Cloudflare, Google, Meta, Stripe) may process it outside the EU/EEA, for example in the United States. These transfers rely on an adequacy decision of the European Commission (such as the EU–U.S. Data Privacy Framework) or on the European Commission's standard contractual clauses.
8. How long we keep data
- Account and content: while your account exists. When you delete your account, your personal data is erased or irreversibly anonymised without undue delay; replies other people wrote to your posts may stay, without your name.
- Usage statistics: up to 13 months.
- Server and network logs: only as long as needed for security and troubleshooting; they are overwritten on a rolling basis.
- Backups: kept for a short period and overwritten on a rolling schedule.
- Payment records: as long as tax and accounting law requires.
- Reports of abuse: as long as needed to handle them and to prevent repeated abuse.
9. Your rights
You can see and correct your profile in your settings, download a copy of your data and delete your account right in invme — no request needed. You can also ask us, at [email protected], to give you access to your data, correct or erase it, restrict or object to its processing, or transfer it to you or another service, and you can withdraw any consent you gave. We answer within one month.
If you are in the EU/EEA, the UK or Switzerland, you can also lodge a complaint with your data protection authority. If you live in California or another U.S. state with a privacy law, you have the right to know, access, correct and delete your personal information; we do not sell it or share it for cross-context behavioural advertising, and we will not treat you differently for using your rights. Wherever you live, write to us and we will help.
11. Security
All connections are encrypted (HTTPS). Passwords are stored only as one-way hashes. Access to personal data is limited to the people who need it, and staff accounts are protected with two-factor authentication. Sign-in attempts are rate-limited. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.
12. Age
invme is for adults aged 18 or older. We do not knowingly collect data from anyone under 18; such accounts are removed as soon as we learn about them.
13. Changes to this policy
We may update this policy. The date at the top shows the latest version; material changes are announced in invme or by e-mail before they take effect.
14. Contact
Invme LLC. E-mail: [email protected]. See also our Terms of Service.