Legal

Privacy Policy

Last updated: May 1, 2026

1. Information We Collect

We collect the following types of information:

  • Account information: name, email address, and profile photo when you sign up
  • Event data: event details, guest lists, invitation designs you create
  • Guest information: names, phone numbers, and RSVP responses provided by you or your guests
  • Usage data: how you interact with the Service (pages visited, features used)

2. How We Use Your Information

  • Provide and improve the Service
  • Send invitations and SMS messages on your behalf
  • Track RSVPs and manage guest check-ins
  • Send you service-related notifications
  • Analyze usage patterns to improve the product

3. Data Sharing

We do not sell your personal data. We share information only with:

  • SMS providers: to deliver invitation messages
  • Cloud infrastructure: Supabase (database), Firebase (authentication), Cloudflare (hosting)
  • Legal requirements: if required by law or to protect our rights

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Row Level Security to ensure your event data is isolated and accessible only to you. All connections are encrypted via HTTPS.

5. Guest Data

Guest information (names, phone numbers, RSVP responses) is stored per event and is only accessible to the event owner. When an event is deleted, all associated guest data is permanently removed.

6. Your Rights

You can:

  • Access and download your data at any time
  • Update or correct your account information
  • Delete your account and all associated data
  • Request a copy of data we hold about you

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

8. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes through the Service or via email.

9. Contact

For privacy-related questions, contact us at privacy@tiricard.com.