Legal
Privacy statement
1. Who we are
RSVPnag (rsvpnag.com) is operated by Interactive Enterprises Limited, a company registered in the Isle of Man (Company Number 137228C). Corporate site: int-ent.ltd.
Privacy contact: [email protected].
We are the controller for personal data processed through RSVPnag.
2. What this statement covers
This statement explains how we handle information when someone creates an organiser account, makes an event, replies to an invitation, or writes to us.
3. Information we collect
- Organiser account. Name, email address, and a hash of the password if you set one. If you choose Continue with Google, we also store the id Google gives that account, and the name and email Google has confirmed. We never see the Google password. If you take Premium, we also store the plan, the PayPal subscription id, the status, the period end, and the price and cycle you agreed. We do not store the card number.
- Events and replies. The event title, date, place, choices, and the optional note for members. A reply stores the name, whether that person is coming, their choices, an optional note, and an optional email address. Guests do not have accounts.
- List password. Stored so the organiser can read it and tell guests. When one is set, guests type it before the invitation opens. It does not open the organiser’s dashboard.
- Phone that saved the reply. The first save sets a cookie on that phone and stores a hash of the matching token. That phone can change the reply. The organiser can remove a name so the person can reply again.
- Private organiser notes. Notes on the dashboard stay with that organiser. They are not shown on the invitation or to other guests.
- Address book. On Premium, an organiser can save names and email addresses, typed in or imported from a CSV or vCard file they upload, and the same person can be in more than one group. We do not connect to Outlook, Google, or Apple. Group names are kept with the book. The book is visible only on that organiser’s account, and it is removed when the account is deleted.
- Email. Before we store a new account address or a guest address, and before we send to an extra recipient, Amazon SES may check that the address looks reachable. We keep that verdict for about 7 days. A new account, and a changed account email, stay closed until that address opens a confirmation link. Messages we send are logged for the organiser who sent them, including the address, subject, and body. Password-reset links and email-confirmation links are not written into that log.
- Stay logged in. If you tick it, we store a random selector and a hash of a second secret, for up to 60 days, so this device can open your account after the browser closes. See the Cookie policy.
- Security records. Failed logins and list-password tries store a hash of the IP address, not the address itself, and those rows are removed after about a day.
- Connection details on a reply. When someone sends, changes, confirms, or removes a reply, we store the date and time in UK time, the IP address we saw, and the browser’s user-agent string. We also store a short device line, such as “iPhone, iOS 18, Chrome iOS”. For a public IP address we may look up the hostname in the public DNS directory, which often names the network or ISP. The site owner can see this. The organiser of the event cannot. Failed list-password tries are still only a hash.
4. How we use information
- to run the event, the guest list, and the organiser account;
- to send password resets and email confirmations, and, on Premium, the invitation email and a notice when someone replies;
- to check an address before we keep it or mail it, and to limit abuse;
- to keep a record of replies, including ones an organiser removes, and to investigate misuse;
- to take payment for Premium through PayPal and to show the organiser the plan they are on;
- to meet a legal obligation where one applies.
5. Legal bases
We rely on the service you asked for (the account, the event, and the reply), legitimate interests (security, rate limits, and checking that an address looks reachable before we write to it), consent for the optional stay-logged-in cookie, and a legal obligation where one applies under Isle of Man law.
6. Who else sees it
We do not sell personal data. We share limited data with:
- the host that runs the site;
- Amazon SES, when an address is checked or a message is sent;
- Cloudflare, when Turnstile checks a login, a new account, a password reset, an email confirmation request, or an account save;
- PayPal, when you subscribe to Premium or cancel that subscription;
- advisers or authorities where the law requires it.
People with the member link can see the invitation. When the organiser has set a list password, they type it before the invitation opens. They do not see email addresses, the organiser’s private notes, or that password written on the page. The organiser sees the replies. Email addresses on the list are shown and mailed only while that organiser’s Premium is on.
7. International transfers
Amazon, Cloudflare, and PayPal may process data outside the Isle of Man, the UK, and the EEA. Where that happens we use the safeguards required by applicable law.
8. How long we keep it
An account stays while it exists. You can ask us to delete it. Closing an organiser account stops that login. The events and replies are kept, and the public links for those events stop. A reply an organiser takes off the list stays in the history. Only the site owner can permanently delete a reply row, and that deletion is logged. The raw IP address and user-agent string on a reply action are removed after 180 days, unless the site owner sets a different period (at least 7 days). The reply itself, what changed, and the short device line stay after that. A stay-logged-in token expires after 60 days, or sooner if you log out, change the password, change the account email, or choose essential cookies only. A password-reset link lasts an hour. An email-confirmation link lasts a day. Address-check results last about 7 days. The mail log stays so the organiser can see what was sent. Payment rows stay for accounting. Rate-limit rows are removed after about a day.
9. Your rights
Subject to Isle of Man data protection law, you may ask to access, correct, delete, or restrict certain personal data, or object to some processing. Write to [email protected]. You may also complain to the Isle of Man Information Commissioner.
10. Children
Organiser accounts are for adults. We do not knowingly open an account for a child. A guest list can include a child’s name when an adult types it.
11. Changes
We may update this statement. The date above changes when we do.
12. Contact
Interactive Enterprises Limited · Company 137228C · Isle of Man
[email protected] · int-ent.ltd