What we collect
When you create an account, we store your name and email, and a password hash if you set one. When you sign in with Google or Apple, we store the email and basic profile info that provider returns. When you build an event site, we store the title, slug, event details, guest names and emails you add, RSVP responses, and any photos or files you upload. We also keep standard server logs (IP address, browser, timestamps) for security and debugging.
How we use it
We use your data to:
Run the product
Store your site, deliver RSVPs to you, send password resets and verification email.
Send guest reminders
If you enable reminders, our worker emails guests who have not responded yet.
Keep things safe
ClamAV scans every photo upload for malware. We block files that fail the scan.
We do not sell your data, run ads, or train models on your content.
Where it lives
Your data lives on infrastructure we operate — not rented third-party SaaS. Records live in a Postgres database, photo uploads in S3-compatible object storage, and email is sent through our own self-hosted mail server. A few things genuinely require outside services, and we keep that list short and honest: signing in with Google or Apple (only if you choose to), delivering messages over WhatsApp (which necessarily passes through WhatsApp/Meta), AI-assisted wording suggestions (the text you ask it to improve is sent to Google's Gemini, only when you use that feature), TLS encryption certificates (Let's Encrypt), and DNS (Cloudflare).
Who can see what
If you publish your event site, it is public — guests, search engines, and anyone with the link can see it. Your guest list, RSVP responses, and account settings are only visible to you (and to planners you have invited to a workspace, if you are a planner account). Our staff can access data only when needed to support you, debug an issue, or comply with the law.
Your rights
You can:
Access
Request a copy of the personal data tied to your account.
Correct
Update your name, email, or event details at any time from the dashboard.
Delete
Delete a single event from the dashboard, or your whole account from settings. Deletion is immediate and final.
Contact
Data questions: [email protected]. General contact: [email protected].
Changes
We will email active users when we change this policy in a meaningful way. The effective date above marks the latest version.