Privacy Policy

Effective June 18, 2026

What we collect

• Account info: your email, username, and a hashed password.
• Event data: guest names, emails, response choices, and timestamps.
• SMS data (Pro and Pro Plus): if a host adds a guest's phone number to send an SMS invitation, we store that number, the delivery status, and any RSVP reply, plus a record of opt-outs. This opt-in and consent data is used only to send that host's event texts and is never shared with any third parties for their own use.
• Billing data: handled by Stripe; we only store a customer ID and subscription ID.
• Technical logs: IP, user agent, and request timestamps for security and abuse prevention. Rotated after 30 days.
• Analytics: Google Analytics 4 for aggregate page views. Anonymized IP, no cross-site tracking.

What we don't do

• We don't sell your data.
• We don't share it with advertisers.
• We don't use your guest lists to train AI models.
• We don't email your guests outside of events you send.

All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties.

Who sees what

Your guests see the invite you composed and the response page. Your co-hosts (if any) see the event and its responses. We see only what we need to to run the service.

Subprocessors

• Cloudflare — hosting, D1 database, edge runtime.
• Resend — outbound email delivery.
• Twilio — outbound SMS delivery and inbound reply handling for SMS invitations (Pro and Pro Plus only).
• Stripe — payments and subscriptions (paid plans only).
• Google Analytics — aggregate site analytics.

Your rights

You can export or delete your data at any time. Email hello@postmark.rsvp and we'll handle it within 30 days. EU/UK residents have GDPR rights; California residents have CCPA rights; we honor both.

Cookies

One session cookie to keep you logged in. Google Analytics sets its own cookies. We don't use third-party advertising cookies.

Questions? Email hello@postmark.rsvp.