Privacy Policy
Last updated: May 2025. Your privacy matters to us.
1. What information do we collect?
We collect the following information: • Account data: full name, email address, password (encrypted). • Event data: wedding title, dates, venue, cover image. • Guest data: names, phone numbers, emails, dietary restrictions, RSVP status, internal notes. • Usage data: pages visited, clicks, time in app (via anonymous analytics). • Payment data: processed by Stripe; we do not store credit card information.
2. How do we use the information?
We use information to: • Provide and improve the GuestyList service. • Send service communications (payment confirmations, important notifications). • Process payments securely through Stripe. • Personalize the user experience. • Comply with legal obligations and prevent fraud. We do not sell or rent your information to third parties.
3. Wedding Guest Data
When you upload guest information, we act as a data processor on your behalf. You are the data controller responsible for that data. Guests may submit RSVP information, dietary restrictions, and messages. All this information is treated with confidentiality and is only accessible by you as the event organizer.
4. Cookies and Tracking Technologies
We use cookies to: • Keep your session active. • Remember language preferences. • Anonymous usage analytics (no personal data). See our Cookie Policy for more details.
5. Third Parties
We work with the following trusted third parties: • Stripe (payments) — PCI-DSS compliant. • Base44 (cloud infrastructure) — secure data storage. • Analytics (anonymous usage statistics). Each provider has their own privacy policies and we minimize shared information.
6. Data Security
We implement technical and organizational measures to protect your information: • Encrypted connections with SSL/TLS. • Passwords stored with secure hashing. • Restricted access to production data. • Regular backups. No system is 100% secure. We notify affected users in case of security breaches.
7. Data Retention
We retain data while your account is active or as needed to provide the service. When you cancel your account, data will be deleted within 90 days, unless legally required to retain it longer.
8. Your Rights (GDPR and local rights)
You have the right to: • Access your personal information. • Correct inaccurate data. • Request data deletion ("right to be forgotten"). • Data portability. • Object to processing in certain cases. To exercise these rights, contact us at: privacy@guestylist.com
9. International Transfers
Our servers may be located in different regions. If you operate from Europe (EU/EEA), we ensure data transfers comply with GDPR standards through standard contractual clauses or other approved mechanisms.
10. Minors
GuestyList is not directed at users under 16 years of age. We do not intentionally collect information from minors. If you believe a minor has provided information, contact us to have it removed.
11. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes by email or on the platform. The last updated date is always visible.
12. Contact
For privacy inquiries: privacy@guestylist.com