Legal

Privacy Policy

How we collect, use, and protect the information you share with Lily.

Last updated August 24, 2026

Who we are and what this policy covers

This Privacy Policy explains how Lily for Digital Invitations ("Lily," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit our website, create an account, personalize and purchase a digital invitation, or respond to an invitation as a guest (together, the "Service"). Lily for Digital Invitations is operated from the Hashemite Kingdom of Jordan. If you have any questions about this policy or how we handle your data, you can reach us at info@lilycardsjo.com or +962 798 030 586. This policy does not cover the internal administrative tools our own staff use to build and manage templates — it covers the Service as experienced by customers and their guests.

Information you provide to us

We collect the information you give us directly: • Account details — your name, email address, phone number, and a password (which we store only as a secure one-way hash, never in plain text) when you register, or your Google/Apple account identifier and the email it discloses if you sign in that way. • Purchase and personalization details — the text, event details, and any photos you or your guests enter while personalizing an invitation (for example, names, dates, venue details, and a replacement photo), and the email and phone number you provide at checkout. • RSVP responses — whatever an invitation's host has configured the RSVP form to ask for (typically a guest's name, contact details, attendance, and any comments), submitted by guests responding to an invitation. • Communications — anything you send us when you contact support or otherwise write to us.

Information we collect automatically

When you use the Service, we and our infrastructure providers automatically collect: • Device and usage data — your IP address, browser type, and general technical information about the device you're using, collected for security, fraud-prevention, and troubleshooting purposes. • A device identifier — a randomly generated id (not tied to any hardware serial number or MAC address) that we set to recognize your browser across visits. We use this to enforce an invitation's "opens on one device" privacy setting and to stop the same guest from submitting an RSVP more than once — not for advertising or building a behavioral profile of you. We do not use third-party advertising trackers, and we do not sell your personal information.

Cookies and similar technologies

We use a small number of cookies and browser-storage entries, all functional — none are used for advertising: • Session cookies (httpOnly, so no script can read them) that keep you signed in — separate cookies are used for the customer site and the admin panel so one session can never be confused with the other. • A device-identifier cookie/local-storage value, kept for up to two years, used only for the anti-abuse purposes described above. • A local-storage entry that remembers your language preference (English or Arabic) and, in the admin panel, your theme and layout preferences. • A temporary, tab-scoped storage entry that holds your in-progress invitation personalization (including the email/phone you're about to check out with) so you don't lose your work if you accidentally reload the page — it's automatically cleared once your purchase completes or you close the tab. Most browsers let you block or delete cookies through their settings; doing so may prevent you from staying signed in or from parts of the personalization flow working correctly.

How we use your information

We use the information described above to: • Create and secure your account, and verify your phone number by SMS code when you register. • Build, deliver, and let you share your personalized digital invitation, and collect and display RSVP responses to you as the invitation's host. • Process your payment and send you order confirmations and receipts. • Send service messages — verification codes, password-reset codes, order updates, and notices about changes to these policies — by email or SMS. • Detect and prevent fraud and abuse, including enforcing invitation link privacy and stopping automated or malicious traffic. • Respond to your questions and support requests. • Comply with our legal, tax, and accounting obligations.

Legal bases for processing

We process personal data on the following legal bases: performance of a contract with you (creating your account, delivering the invitation you purchased, processing payment); your explicit consent, which you give when you check the acceptance box for these Terms and this Privacy Policy, and which you may withdraw at any time as described below; our legitimate interest in keeping the Service secure and free of fraud and abuse; and compliance with our legal obligations under Jordanian law.

How we share your information

We do not sell your personal information. We share it only with the service providers that help us run Lily, each acting under its own terms and only for the purpose we use them for: • Stripe — processes your payment. Your card details are entered directly into Stripe's own secure form and never pass through our servers. • Cloudinary — hosts the images, videos, and fonts used in templates and invitations, including any photo you or your guests upload. • MongoDB Atlas — hosts our application database. • Twilio — sends and verifies the SMS codes used for phone verification and password resets. • Resend — sends our transactional emails (verification codes, receipts, notices). • Google and Apple — verify your identity if you choose to sign in with a Google or Apple account. • Arcjet — screens incoming traffic for bots and abusive request patterns and enforces rate limits, processing request metadata such as your IP address. • Sentry — receives technical error reports to help us find and fix bugs. We may also disclose information if required by law, to protect our rights or the safety of our users, or in connection with a merger, acquisition, or sale of assets — in which case we would tell you before your data becomes subject to a different privacy policy.

Payment information

All payments are handled directly by Stripe, our payment processor. We never receive or store your full card number, expiry date, or CVV. We receive back only a payment confirmation and a reference id, plus the receipt email address and order amount needed to process your purchase. Prices on the Service are shown in Jordanian Dinar (JOD); because Stripe does not settle in JOD, your card is charged the USD equivalent at the exchange rate in effect at the time of your purchase, based on the Central Bank of Jordan's official peg. Stripe's own privacy policy governs its handling of your payment data.

Guests, RSVPs, and shared invitations

If someone shares a Lily invitation with you, you can personalize your reply (RSVP) without creating an account. The information you submit in an RSVP form is visible to the invitation's owner (the person who purchased it) and to our administrators, so they can plan their event — it is not visible to other guests, and we do not use it for any purpose other than delivering it to the host and preventing duplicate submissions from the same device. If you're asked to upload a photo while personalizing an invitation before it's purchased, that upload is anonymous at the time it happens — it's only linked to a person once a purchase is completed with a name, email, and phone number.

Data retention

We keep your account information for as long as your account remains active. After your account is closed, or after an order/invitation is completed, we keep the related records for as long as needed to meet our legal, tax, and accounting obligations under Jordanian law (generally up to five years from the end of the relevant transaction), resolve disputes, and enforce our agreements — after which we delete or anonymize it. We do not currently offer an automated self-service deletion tool. If you'd like your account or personal data deleted sooner, contact us at info@lilycardsjo.com and we will action your request manually, subject to the retention obligations above.

Data security

We take reasonable technical and organizational measures to protect your information, including: storing passwords only as salted one-way hashes, never in plain text; keeping session tokens in secure, browser-inaccessible cookies; encrypting traffic to our servers in transit; screening incoming traffic for bots and abusive requests; and restricting access to personal data to the staff and administrators who need it to run the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International data transfers

Several of the service providers listed above operate infrastructure outside Jordan (including in the United States and the European Union). Where we transfer personal data outside Jordan, we rely on the safeguards and data-processing terms those providers publish, and, where relevant, on your consent to this policy as permitted under Jordan's Personal Data Protection Law. If Jordan's Data Protection Authority publishes a list of countries recognized as providing an adequate level of protection, we will take it into account in choosing and reviewing our providers.

Your rights under Jordanian law

Under Jordan's Personal Data Protection Law No. 24 of 2023, you have the right to: know what personal data we hold about you and access a copy of it; request correction of inaccurate or outdated data; withdraw your consent to processing at any time; request that processing of your data be restricted to a specific scope; object to processing carried out on the basis of legitimate interest; request erasure of your data, subject to our legal retention obligations; and request a copy of your data in a portable format. To exercise any of these rights, contact us at info@lilycardsjo.com. We will respond within a reasonable time and, in any event, no later than 30 days. Jordan's national Data Protection Authority is not yet fully operational at the time of writing; once it is, you will also have the right to lodge a complaint with it. In the meantime, general consumer complaints about our Service can also be raised with the Consumer Protection Directorate at Jordan's Ministry of Industry, Trade and Supply.

Children's privacy

The Service is intended for people who are at least 18 years old and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data without appropriate parental or guardian consent, please contact us at info@lilycardsjo.com and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we increase its version number, email every registered user to let them know, and, if you have an account, ask you to confirm your acceptance of the updated policy the next time you check out. We encourage you to review this page periodically; the "last updated" date at the top shows when it was last revised.

Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, contact us at: Email: info@lilycardsjo.com Phone: +962 798 030 586