Privacy Policy

Effective June 3, 2026

What we collect

• Account info: your email, username, and a hashed password.
• Campaign data: guest names, emails, response choices, and timestamps.
• Billing data: handled by Stripe; we only store a customer ID and subscription ID.
• Technical logs: IP, user agent, and request timestamps for security and abuse prevention. Rotated after 30 days.
• Analytics: Google Analytics 4 for aggregate page views. Anonymized IP, no cross-site tracking.

What we don't do

• We don't sell your data.
• We don't share it with advertisers.
• We don't use your guest lists to train AI models.
• We don't email your guests outside of campaigns you send.

Who sees what

Your guests see the invite you composed and the response page. Your co-hosts (if any) see the campaign and its responses. We see only what we need to to run the service.

Subprocessors

• Cloudflare — hosting, D1 database, edge runtime.
• Resend — outbound email delivery.
• Stripe — payments and subscriptions (paid plans only).
• Google Analytics — aggregate site analytics.

Your rights

You can export or delete your data at any time. Email hello@postmark.rsvp and we'll handle it within 30 days. EU/UK residents have GDPR rights; California residents have CCPA rights; we honor both.

Cookies

One session cookie to keep you logged in. Google Analytics sets its own cookies. We don't use third-party advertising cookies.

Questions? Email hello@postmark.rsvp.