Privacy & data policy

Last updated · 11 July 2026

rsvp-to (“we”, “us”) provides event RSVP pages at rsvp-to.com/<your-event>. This policy explains what we store, who we share it with, and — importantly — when event pages and their data are automatically suspended and deleted after the event.

What happens to your event after the day

Your page stays live right up to your event, then winds down automatically:

1 week after your event date, the page is automatically suspended — it goes offline to guests and the RSVP form closes. Your dashboard stays available so you can still download your guest list.
1 month after your event date, the event and all its data are permanently deleted from our systems, and removed from backups shortly after.
Before deletion, we email the event’s admin a full export of the guest list and replies (a spreadsheet you can keep), so nothing is lost. You can also request an export at any time.

This keeps your guests’ personal details from living on our servers indefinitely once they’re no longer needed. If you need your page to stay live longer, just contact us before it’s removed.

What we collect

From the host (the couple / organiser): your name, email, event details, page content and colours you set, and billing information. Payment card details are handled by Stripe — we never see or store your full card number.

About guests: only what the host provides or a guest submits when replying — typically name, and any of: email, phone, attendance, party size, meal choice and dietary notes. The host is the owner of this guest information; we process it on their behalf to run their event.

Automatically: basic technical logs (e.g. that an invite link was opened) to run the service and show hosts reply activity. We don’t sell data or run third-party advertising trackers.

How we use it

To display the event page and collect and manage RSVPs.
To send transactional email on the host’s behalf (reply confirmations, host notifications).
To take payment for the service and provide support.

Who we share it with

We use a small number of trusted processors, only to run the service:

Cloudflare — hosting, database and file storage.
Stripe — payment processing.
Resend — sending the emails described above.

We don’t sell your data or share it for advertising.

Data retention & backups

Guest data is retained only for the life of the event, per the schedule above (suspended 1 week after the event, deleted 1 month after). We keep encrypted backups so we can recover from failure; backup copies of a deleted event are purged on a rolling basis (within about 90 days). Basic billing records may be kept longer where required by law.

Your choices & rights

Export: hosts can download their full guest list from the dashboard at any time, and are emailed a copy automatically before deletion.
Access, correction or early deletion: hosts can edit their event, or ask us to delete it sooner.
Guests who want their entry corrected or removed should contact the event’s host (the data owner), or us and we’ll pass it on.

Security

Data is served over HTTPS and stored on Cloudflare’s infrastructure. Admin access to an event requires email-verified sign-in. Payment secrets never reach the browser.

Contact

Questions, exports, or deletion requests: [email protected].