Privacy Policy

This Privacy Policy explains how Eventifia ("we", "us") collects, uses, and shares information when you use our websites, applications, and services (the "Service"). By using the Service, you consent to the practices described here.

1. Information we collect

1.1 Information you give us

• Account data. Name, email, password (stored hashed), preferred language, profile photo.
• Event content. Event details, guest lists, invitations, RSVP responses, seating charts, photos, and messages you send through the Service.
• Payment data. Billing details handled by our payment processors. We never store full card numbers on our systems.
• Communications. Messages you send to our support team and feedback you submit.

1.2 Information we collect automatically

• Device & usage. Device type, OS, browser, IP address, pages viewed, features used, timestamps.
• Cookies & similar. Session cookies for authentication, preference cookies for language and theme, and limited analytics cookies for product improvement.

2. How we use information

• Provide, operate, and improve the Service.
• Authenticate you, secure your account, and detect fraud or abuse.
• Send transactional emails (signup confirmation, password resets, security alerts) and event-related messages on your behalf.
• Send product updates and tips, if you opted in. You can opt out at any time from your account settings.
• Comply with legal obligations, enforce our Terms, and protect our and our users' rights.

3. Sharing of information

We share personal data only as described below:

• Service providers. Email delivery (Resend), database and authentication (Supabase), hosting (Vercel), media storage and processing (Cloudflare R2), SMS and WhatsApp delivery providers, and payment processors. Each is contractually required to handle data appropriately.
• Your guests & collaborators. Event content you create is shared with the people you invite, by design.
• Legal & safety. When required by law, court order, or to protect rights, property, or safety.
• Business transfers. If Eventifia is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

We do not sell personal data.

4. Data storage & security

Data is stored on infrastructure provided by our service providers, primarily in the European Union. We use encryption in transit (TLS) and at rest, role-based access controls, and security monitoring. No system is perfectly secure, but we take reasonable measures to protect your information.

5. Data retention

We keep your data for as long as your account is active and for a reasonable period after to handle billing, legal, and operational obligations. You can request deletion at any time; some data may be retained where required by law (e.g., financial records).

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict processing of, or port your personal data, and to withdraw consent at any time. To exercise these rights, contact us at hello@eventifia.com. We will respond within the time required by applicable law.

7. International data transfers

We may transfer personal data across borders to operate the Service. We rely on appropriate safeguards (such as standard contractual clauses) when transferring data out of the European Economic Area.

8. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. We will post the new version with an updated "Last updated" date and, if changes are material, notify you in advance.

10. Contact

Questions or concerns about this Privacy Policy? Reach us at hello@eventifia.com.