Privacy Policy

Last Updated: December 6, 2025

1. Information We Collect

We collect several types of information to provide and improve our services:

Personal Data

• Account Information: Name, email, phone number, profile picture
• Event Details: Event names, dates, locations, descriptions
• Guest Information: Names, contact details, RSVP responses, meal preferences
• Payment Information: Billing address, transaction history (processed securely by our payment partners)

Usage Data

• Pages visited and features used
• Time spent on different sections
• Clickstream data and navigation paths
• Feature preferences and settings

Technical Data

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Unique device identifiers
• Crash reports and performance data

2. How We Use Your Information

We use the collected data for various purposes:

Purpose	Data Used	Legal Basis
Provide and maintain our service	Account info, event details	Contractual necessity
Notify about changes	Contact information	Legitimate interest
Customer support	Account info, event details	Contractual necessity
Service improvement	Usage data, technical data	Legitimate interest
Security monitoring	Technical data, access logs	Legitimate interest

3. Data Sharing and Disclosure

We may share your information in these situations:

Service Providers

• Payment processors: To complete transactions
• Cloud hosting: For data storage and processing
• Analytics: To understand service usage
• Communication tools: For sending invitations and notifications

Legal Requirements

We may disclose your data if required by law or in response to valid requests by public authorities.

Business Transfers

In case of merger, acquisition, or asset sale, your data may be transferred with notice.

4. Data Security

We implement robust security measures including:

• SSL/TLS encryption for all data in transit
• Encryption at rest for sensitive data
• Regular security audits and penetration testing
• Access controls and authentication protocols
• Secure development practices

5. Data Retention

We retain personal data only as long as necessary:

• Active accounts: Until account deletion
• Inactive accounts: Up to 24 months
• Financial records: 7 years for tax purposes
• Backups: Up to 6 months after deletion

6. Your Rights

Depending on your jurisdiction, you may have these rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request limitation of processing
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing activities

7. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place.

8. Children's Privacy

Our service is not intended for users under 16. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes through email or service notifications.

10. Contact Us

For privacy-related inquiries or to exercise your rights:

Email: privacy@simplyrsvp.me
Data Protection Officer: dpo@simplyrsvp.me