Legal
Privacy Policy
This policy explains the information ezrsvps handles when hosts create invitations and guests submit RSVPs.
Last updated: July 29, 2026
Who operates ezrsvps
ezrsvps is operated from New York, United States. Questions and privacy requests can be sent to accounts@ezrsvps.com.
Information we collect
- Host account information: email address, authentication-provider details, and account identifiers needed to sign in and secure the account.
- Invitation information: event title, date, location, host note, questions, design choices, uploaded artwork, AI design prompts, public link, and publication status.
- Guest RSVP information: guest name, attendance, party size, answers to the host’s questions, optional contact details requested by the host, a device token used to recognize an earlier response, and submission time.
- Purchase information: the invitation upgraded, payment status, amount, and transaction-related identifiers. Stripe processes payment-card details; ezrsvps does not receive the full card number.
- Technical information: necessary cookies or local storage, IP address and request logs processed by service providers, device/browser information, and security or error information.
- Support information: messages and attachments you send to the support inbox.
How we use information
- Provide, secure, maintain, and troubleshoot accounts, invitations, RSVP forms, dashboards, email notifications, exports, and paid features.
- Authenticate hosts and recognize a guest’s earlier response on the same device so it can be updated.
- Process one-time invitation upgrades, prevent fraud, and respond to billing or refund requests.
- Generate invitation artwork and design settings when a host requests AI assistance.
- Communicate about service, security, support, and changes to these policies.
- Understand aggregate product performance and improve ezrsvps, subject to the analytics and consent terms below.
- Comply with law, enforce the Terms of Service, and protect users and the service.
Public invitations and host responsibility
Published invitation and RSVP pages use a public link. Anyone with that link may be able to view the invitation and submit a response. Hosts decide what questions to ask, who receives the link, and how they use guest information. Do not place highly sensitive information in an invitation or ask guests for information the event does not genuinely need.
A paid host may create a separate “who’s coming” link. That page intentionally omits free-text answers and contact details, but the host is responsible for deciding whom to share it with.
Service providers
We use vendors to operate the service. Depending on the feature used, information may be processed by:
- Supabase for authentication, database, and application infrastructure.
- Vercel for website hosting, delivery, and operational logs.
- Stripe for payment processing, checkout, and fraud prevention.
- Google for optional Google sign-in, Gemini-powered design generation, and consented Google Analytics on public marketing pages.
- Resend for service email, including RSVP notifications.
These providers process information under their own terms and privacy policies. We may also disclose information when required by law or reasonably necessary to prevent fraud, abuse, or harm.
AI design generation
When a host asks the AI design tool to create a look, the prompt and limited event categories needed for the request are sent to the configured Google Gemini service. Do not put guest names, contact details, private addresses, or other sensitive information in an AI prompt.
Cookies, local storage, and analytics
ezrsvps uses necessary cookies and browser storage for authentication, security, draft/session behavior, and recognizing a guest’s earlier RSVP on the same device. Blocking necessary storage may prevent parts of the service from working.
On public marketing and policy pages, you may choose whether to allow Google Analytics. Analytics remains off until you consent, does not run or collect on invitation, RSVP, builder, or dashboard pages, and uses manually defined page names instead of public invitation links or application identifiers. Advertising storage, advertising personalization, and Google Signals are disabled. You can change your choice through the “Analytics settings” control on a public marketing page. We do not sell personal information.
Data retention
We retain account, invitation, RSVP, and purchase records for as long as reasonably needed to provide the service, maintain security and backups, resolve disputes, comply with law, and keep accurate transaction records. Retention can vary by record type. Public links may remain active until the host disables or deletes the related content or requests assistance.
Your choices and rights
- Hosts can update available account and invitation settings in the product.
- Guests using the same device can update an earlier RSVP through the invitation link.
- You may request access, correction, or deletion of information associated with you by emailing the address above.
- We may need to verify identity and may retain information when required for security, legal, or transaction-record purposes.
- Depending on where you live, local law may provide additional privacy rights.
Children
ezrsvps is not directed to children under 13, and children under 13 may not create host accounts. Hosts should avoid requesting unnecessary information about minors. If you believe a child has provided personal information improperly, contact us so we can review the request.
Security and international processing
We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security. Our providers may process information in the United States and other countries where they operate, which may have different data-protection laws from your location.
Policy changes
We may update this policy as the product or law changes. The revised version will be posted here with a new “Last updated” date. Material changes may also be communicated through the service or email.