Aviso de privacidad

Last updated: September 28, 2026

This notice explains what personal data we process at Mi Día E, what for, who we share it with, how long we keep it and how you can exercise your rights.

1. Who is responsible

The party responsible for processing your data is Bktun México, with its address at Juan Aldama 415, Centro, Monterrey NL, México. For any privacy matter write to us at hola@midiae.com.

2. Data we process

• Your account: name, email, mobile phone, event type, preferred language and currency, and your password (stored hashed; nobody can read it).
• Your invitation: the text, dates, places, photos, music, videos and links you add. Anyone with the link can see what you publish; if you add a password, only those who also have it. By default your invitation doesn't appear on Google, and its photos can only be opened while it's published and valid.
• Your guests: when they RSVP they enter their name and, optionally, their email, phone and a message. Only you (and our support team) can see them.
• Guest list (Deluxe package): the names, number of passes, mobile numbers and emails you upload to send personal links. You are responsible for having your guests' permission to share their details with us. We only use them to show them their invitation, know whether they opened it and, when you ask, send them an email reminder.
• Payments: package, amount, date and payment status. Your card details are entered and processed directly by Stripe; we never see or store them.
• Support: the messages and files you send us in your help tickets or through the contact form.
• Technical data: your IP address is used on the spot to limit login attempts and stop spam; we don't store it in your profile. Photos you upload are cleaned: we remove the GPS location and your phone's details.
• Visit statistics: for every page opened on the site, the invitations and the dashboard we record the IP address, browser, operating system, device type, the site the visit came from, language, time zone and screen size. Only Mi Día E team members with permission can see them, to understand how the platform is used; we don't use third-party analytics services and they are deleted after 90 days.

We don't process sensitive personal data.

3. What we use it for

Purposes needed to provide the service: creating, publishing and keeping your invitation online; receiving and showing you your guests' RSVPs; processing your payments; sending you notices about your account, payments and invitation; giving you support; and protecting the platform against fraud, spam and unauthorized access.

Additional purpose: occasionally sending you news or promotions from Mi Día E. If you don't want them, write to us and we'll stop without affecting your service.

We don't sell or rent your data, or use it for third-party advertising.

4. Who we share it with

Only with providers we need to operate, who process it on our behalf and only for that purpose:

• Stripe — card payment processing.
• Hostinger — servers that host the platform and its files.
• Email provider — sending your account and invitation emails.
• Cloudflare Turnstile — anti-bot checks on sign-up and public forms.
• Google Maps, YouTube, Vimeo, Spotify — only if the invitation includes a map, a video or a song, and only when the guest taps “View map”, plays the video or opens the invitation with music. They don't connect before that; when used, they apply their own policies. The exception is the YouTube background video (Deluxe package): if the host chooses it, YouTube loads when the invitation is opened, in its privacy-enhanced mode.

We would only share your data with an authority if a law or court order requires it.

5. Cookies and storage in your browser

We use a session cookie to keep you signed in, and two cookies to remember your language and currency. We also store a random identifier in your browser that lets us count how many people are viewing the site right now and how many different people visit it; it doesn't contain your name or your details. We don't use advertising cookies or third-party tracking services.

6. How long we keep your data

• Your account, invitations and files: as long as your account exists. If you delete it, they're deleted immediately.
• RSVPs and guest list: up to 180 days after your invitation expires. We'll let you know 15 days before so you can download the list.
• Accounts that never confirmed their email: 30 days.
• Log of sent emails: 180 days.
• Contact form messages and dashboard notifications: 365 days.
• Payments: 5 years, for tax obligations. If you delete your account, they're kept without your name or contact details.
• Encrypted database backups: 14 days.
• Log of our team's access to client data: 365 days.

7. How we protect it

Encrypted connection (HTTPS), passwords stored with one-way hashing, two-step verification available for every account and mandatory for our team, encrypted keys and backups, limits on login attempts and checks on every uploaded file. Our team only accesses your data to give you support: your email and phone are hidden from them unless they have permission, and every view or change is recorded in an activity log.

8. Your rights (ARCO)

You have the right to access, rectify or delete your data, or object to its use, and to withdraw your consent. You can do it yourself from your dashboard:

• Access: My account → Download my data.
• Rectification: My account and your invitation editor.
• Deletion: My account → Delete my account.

You can also write to us at hola@midiae.com with your name, your account email and what you're requesting. We'll reply within 20 business days at most. If you're a guest and want us to delete your RSVP, write to us or ask the host.

9. Changes to this notice

If we change this notice, we'll publish the new version on this page with its update date and, if the change is significant, we'll let you know by email.