Privacy Policy

From hosts: the event details you enter (title, date, location, description, images and other media you upload), your name, and — if you provide it or sign in — your email address. If you upload an invite list, we store the names, emails, and phone numbers you provide so we can send invitations on your behalf.

From guests: what you submit when you RSVP — your name, your response, and optionally your email, plus-ones, meal choice or dietary notes, a message to the host, and potluck sign-ups. No guest account or password is ever required.

Automatically: basic technical logs (IP address, browser type, pages requested) kept by our hosting provider for security and reliability. We also use privacy-conscious product analytics (PostHog) to understand which pages and features are used — page views and feature clicks only; we never send guest RSVP details or your event's private links to analytics, and we don't use advertising trackers. We use a small amount of browser storage on event pages for conveniences like remembering your potluck sign-up so you can undo it — not for advertising or cross-site tracking.

• Run your event: show the event page, record RSVPs, keep a live headcount.
• Send event messages: RSVP confirmations, host notifications, reminders, and date/location change notices.
• Send invitations (email or SMS) that a host asks us to send to their invite list.
• Keep the Service secure and troubleshoot problems.
• With your consent, send occasional product updates — every marketing email includes one-click unsubscribe.

We do not sell personal information, and we do not run third-party advertising.

Your host sees the RSVP information you submit for their event. Other guests can see limited social details on the event page: first initials and count of attendees, and names on the potluck sign-up sheet. Your email is never shown to other guests.

Event pages are unlisted — reachable only by their link — and we ask search engines not to index them.

We share data only with the vendors who run the Service for us, under their own confidentiality obligations: our hosting and content delivery provider (Vercel), our database provider (Neon), our email delivery provider, our SMS provider (Twilio, when a host sends text invitations), and our file storage provider for uploaded images. If we add payment processing, card details will go directly to the payment processor (e.g. Stripe) — we never see or store card numbers.

Event data is kept while the event's host keeps it — hosts can delete individual RSVPs or ask us to delete an entire event. Guests can update or cancel their own RSVP any time using the link in their confirmation email. To have your information removed from an event, you can also contact the host directly or email us and we'll help.

• RSVP without an email address — it's optional.
• Unsubscribe from marketing email with one click; transactional messages about an event you RSVPed to are sent only around that event.
• Ask us to access, correct, or delete your personal information: email us and we'll respond within 30 days.

The Service is not directed to children under 13, and we don't knowingly collect their personal information. Events celebrating children are created and managed by adults.

All traffic is encrypted in transit (HTTPS), event dashboards are gated by private tokens, and access to production data is limited. No system is perfectly secure, so please keep your event's management link private.

If we change this policy in a material way we'll post the update here with a new effective date and make reasonable efforts to notify hosts.

Privacy questions or requests: support@attend360.net. See also our Terms of Service.