How your information is handled

Who is responsible for your information

The couple whose wedding you were invited to gave us your details and decides what happens to them. Under the Protection of Personal Information Act they are the responsible party. [placeholder: OPERATOR_NAME] is their operator: we process your information on their instructions and for no other purpose.

If you want your details changed or removed, the fastest route is to ask the couple. You can also ask us and we will act on it.

What we hold

Your name, and whichever of your email address and phone number the couple had. Whether you said you were coming. What you chose to eat, and anything you told us about allergies or dietary needs. A song request or a note, if you left one. Which messages we sent you, and whether they were delivered.

We do not track whether you open our emails, we do not collect your location, we do not track you across other websites, and the guest page carries no advertising or analytics scripts.

What we do with it

We show the couple, and anyone they have invited to help run the wedding, who is coming. We send you the invitation, a confirmation email when you reply, and reminders if you have not replied. If the couple sends invitations over WhatsApp, they do it from their own phone; we only prepare the message.

We pass the headcount, the meal split and the allergy list to the couple's caterer. The allergy list names the guests it applies to, so the kitchen knows whose plate is whose; it never includes your email address or phone number.

We never sell your information, and we never use it to advertise to you.

Stopping messages

Every email we send carries an unsubscribe link. One click stops everything, permanently, across the whole platform — not just this wedding. If email to your address bounces permanently or you report it as spam, we treat that the same way. We keep a one-way fingerprint of your address so we can honour that, and no readable copy of it.

How long we keep it

Guest information is kept until the couple deletes the wedding or closes their account, and then deleted. The unsubscribe fingerprint is kept permanently, because that is what makes an unsubscribe stick.

Guests cannot upload photographs yet. When the photo wall arrives, uploads will be deleted automatically 60 days after the event.

Who is responsible

For your own account — as opposed to your guest list, which you are responsible for — [placeholder: OPERATOR_NAME] is the responsible party.

What we hold about you

Your name, email address and a one-way hash of your password, and whether you have confirmed your email. The weddings you run, who else is on your team, and the confirmation you give before your first send, with its date and time. Your payments: the amount, status, dates and Yoco’s reference — never your card details, which only Yoco sees. If you turn on notifications, the address your browser gives us to deliver them.

To stop password guessing and abuse we count attempts to sign in, sign up, reset a password, accept a team invitation or draft wording, for a short time. The counters are keyed by a one-way fingerprint of your IP address or email address, not by the address itself. When something breaks, an error report with technical details of the request is kept so we can fix it.

If you ask for wording suggestions, we send Anthropic’s Claude your wedding’s display name, date and venue from your settings, plus whatever you type under “Help me word it”, to draft the words. Your guest list is never sent.

Why

To provide the service you signed up and paid for, to keep it secure, and to meet our legal obligations, such as keeping payment records for tax. We email you only about your account and your wedding: confirming your address, resetting a password, receipts, and replies from your guests.

Your controls

In Settings you can download your guest list as a CSV file, delete a wedding and delete your account. Deleting removes the data straight away; copies in the database provider’s automatic backups expire on their own, normally within seven days. We keep a record that the deletion happened, with counts but no names, and a minimal record of each payment — reference, amount, status, dates, Yoco’s reference, nothing that names you — for as long as tax law requires (currently five years).

What we hold about you

A couple who names you as their caterer gives us your name and email address, and we email you their numbers pack. We record when each pack was sent and when it was first opened: the email contains a small image that tells us, and the couple sees whether their pack has been opened. We keep this until the couple deletes the wedding. To have your details removed, ask the couple, or ask us.

Where it is stored

Our database (Supabase) and our servers (Vercel) are in Frankfurt, Germany, in the European Union. Email is delivered through Resend, background jobs run on Inngest, and wording suggestions come from Anthropic — all United States companies, so information they handle leaves South Africa. Payments are handled by Yoco, in South Africa. The PAIA manual lists every service provider, what each one receives, and how we protect information.

Cookies

Signing in sets one cookie that keeps you signed in. We use no advertising or analytics cookies, and guest pages set none at all.

Your rights

You can ask to see what we hold about you, to correct it, or to have it deleted, and you can object to how it is used. Make a request, or write to hello@rsvpd.co.za. We answer within 30 days. Our Information Officer is the head of [placeholder: OPERATOR_NAME].

You may also complain to the Information Regulator of South Africa: inforegulator.org.za, enquiries@inforegulator.org.za. How to request records under the Promotion of Access to Information Act is in our PAIA manual.

For couples

If you are running a wedding here, the operator terms set out what each of us is responsible for.