1. The service
“Organiser” means the individual or organisation that creates an event. “User” means an organiser or a team member authorised to use the service. “Guest” means a person invited by an organiser; a guest needs no InviteKey account to receive an invitation or present a pass.
InviteKey lets organisers prepare an invitation-only event, import or enter confirmed guests, send invitation emails, issue each guest a personal QR code and, if the guest wishes, an Apple Wallet or Google Wallet pass, and record check-ins. Available features and limits depend on the chosen offer; they are shown before the event is activated and may change.
InviteKey is an access-management tool. It is not the event organiser, a ticket seller or a guarantor of admission. The organiser decides who is invited, who may enter and how its event is run.
2. Accounts and authorised use
Users provide accurate account information, keep their access links and credentials confidential, and use only the permissions granted to them. The organiser is responsible for its team members, its check-in devices, and the accuracy of its event settings and guest information.
The organiser must have a lawful basis to collect and upload its guests’ details and to send them invitations. It is forbidden to upload sensitive data, unlawful content or content infringing another person’s rights, or data unnecessary for access control; to misuse passes; to attempt unauthorised access; to disrupt the service; or to send unsolicited messages.
3. Invitations, Wallet passes and access control
A QR code or Wallet pass is a personal access credential: neither the organiser nor the guest should publish or forward it. A pass stops being valid if it is revoked, if the event expires or if the organiser changes its access rules. A revoked or expired pass may remain visible in the guest’s Wallet app, dimmed or marked inactive: its validity is checked by InviteKey at the door. Wallet availability also depends on the guest’s device and on Apple or Google services.
When the organiser enables offline check-in, a device may record a provisional admission before it synchronises. Two disconnected devices may temporarily accept the same credential; the conflict is resolved or flagged on synchronisation. For stricter control, use server-confirmed check-in and a reliable connection.
Email delivery, Wallet installation and uninterrupted connectivity cannot be guaranteed. The organiser checks essential details and plans an admission fallback suited to its event.
4. Offers, prices and retention period
The offer, its capacity, its price including taxes and the retention period of the event’s data are shown before purchase or event activation. The free offer has a limited capacity and retention period, shown in the same place. Payment and refund terms are presented before any order.
When the retention period ends, access to the event’s data ends. The privacy policy describes how data is kept and deleted, including in backups and logs. Export any information you need before the displayed expiry date.
5. Organisers acting as consumers
InviteKey is designed primarily for professionals. An organiser acting in a private capacity, for example for a family celebration, is a consumer and enjoys, in addition to these terms, the rights guaranteed by law. The pre-contractual information — the service’s essential features, price including taxes, duration, InviteKey’s identity and contact details, withdrawal and mediation terms — is provided before the order, on the purchase page and in these terms.
A consumer has fourteen days from the conclusion of the contract to withdraw, without giving a reason. The service uses resources as soon as the event is activated and can send invitations immediately: by activating a paid event before the end of that period, the consumer expressly requests that the service start at once, and acknowledges losing the right of withdrawal once the service has been fully performed. If the consumer withdraws after the service has started, the price paid is refunded, minus the share corresponding to the service provided until the withdrawal. This request and waiver are collected expressly before the order.
In case of dispute, the consumer first sends a written complaint to support@invitekey.app. If no solution is found, the consumer may refer the matter free of charge to the consumer mediator InviteKey belongs to: CM2C, www.cm2c.net/declarer-un-litige.php.
6. Personal data
The organiser decides which guest data it entrusts to InviteKey and for what purpose. InviteKey processes that data on its behalf, following its instructions, to provide the service; section 7 sets out InviteKey’s commitments as processor. Each party meets the data-protection obligations of its role. The privacy policy describes the data processed, the service providers and how to exercise rights.
The organiser informs its guests as the law requires, and does not ask InviteKey to use their data for any purpose other than this service.
7. Processing on behalf of the organiser
This section is the processing agreement required by Article 28 of the General Data Protection Regulation (GDPR). It applies as soon as an organiser entrusts InviteKey with personal data of its guests or team members.
Subject and duration: providing the service described in section 1, for the retention period of each event. Nature and purposes: hosting, sending invitations, issuing and updating passes, access control and attendance tracking. Data: guests’ identity and contact details, category, invitation and delivery status, pass identifiers, time and checkpoint of admissions, and any field added by the organiser. Data subjects: the organiser’s guests and team members.
InviteKey undertakes to: process this data only on the organiser’s documented instructions — these terms and the settings it chooses in the service — and inform it if an instruction appears to breach the law; keep it confidential, persons authorised to access it being bound by confidentiality; implement appropriate security measures; assist the organiser, where possible, in responding to data-subject requests, ensuring security of processing and, where relevant, carrying out an impact assessment; notify it of any personal-data breach without undue delay after becoming aware of it; make available the information needed to demonstrate compliance with these obligations, and allow audits on reasonable prior request.
The organiser authorises InviteKey to use the sub-processors listed in the privacy policy, which are bound by equivalent obligations. InviteKey informs organisers of any addition or replacement by updating that list before the change and, for a significant change, by email; an organiser that objects may stop using the service. Transfers outside the European Economic Area are safeguarded as described in the privacy policy.
When an event’s retention period ends, InviteKey deletes its data from active systems, as described in the privacy policy, without returning it: the organiser may export it until then.
8. Content and intellectual property
The organiser keeps its rights in the logos, images, event details and guest lists it provides. It grants InviteKey the limited permission to host, process and display them, only as needed for the service. It warrants that it holds the rights needed for anything it uploads.
InviteKey keeps its rights in the service, software, design and brand. These terms grant no right to copy, resell or decompile the service, except where the law allows it.
9. Changes, suspension and liability
We may maintain, improve or change the service. We may restrict access where reasonably necessary to protect its security, prevent abuse, comply with the law or address non-payment, notifying the user where possible. An organiser may stop using the service at any time; doing so does not extend the retention period chosen for its events.
We provide the service with reasonable care but cannot guarantee uninterrupted or error-free operation, nor delivery of emails or passes by third-party services. Nothing in these terms excludes any liability or consumer right that the law does not allow to be excluded. To the extent permitted by law, neither party is liable for losses it could not reasonably foresee when the service was used.
10. Changes to these terms
We may change these terms. The new version is published on this page, with its version and effective date shown at the top; significant changes are announced to existing users by reasonable means before they take effect. Continuing to use the service after that date means acceptance, to the extent permitted by law; otherwise, stop using the service and contact us.
11. Governing law, language and disputes
These terms are governed by French law. They are written in French; translations are provided for information and, in case of difference, only the French version is binding.
Any dispute with an organiser acting in a professional capacity falls under the exclusive jurisdiction of the courts of Lyon (France). A consumer may bring proceedings, at their choice, before the court of the place where they lived when the contract was concluded or the harmful event occurred, or any other court with jurisdiction under the law, and keeps the protection of the mandatory rules of their country of residence.
12. Contact
For any question or complaint: support@invitekey.app.