Privacy policy | RSVP Sorted

RSVP Sorted is run by Steven Day Software. It is the data controller for the information below. Questions or requests: hello@rsvpsorted.com.

For the solicitor: confirm the controller’s legal name, registered office address, company number and whether a UK representative or data protection officer is needed. Add the ICO registration number once registered.

What we collect

Hosts: your email address or phone number, the party details you enter (including the birthday person’s first name and age), and whether you’ve agreed to marketing emails. If you buy credits, a record of the sale. Card details go to our payment provider and never reach us.
Guests: the name, children’s names, answer, numbers and note you type when replying. Guests don’t create an account.
Venues: the names and work email addresses of the people who use the venue dashboard. When a parent taps Make your invite, their venue sends us the child’s first name and age, the party details, the parent’s first name and the booking email, which we keep only as a one-way hash and a masked hint.
Everyone: a count of how many times an invite was opened, anonymous counts of steps like “invite saved” or “reply sent” that say nothing about who took them, and short-lived security records (a scrambled form of your IP address) to stop spam. We don’t use advertising or tracking cookies.

Why we use it

To run your invite and show the host who’s coming, the service you asked for (contract).
To keep the service safe from spam and abuse (legitimate interests).
To see where people get stuck making or answering invites, from anonymous counts (legitimate interests).
To send hosts the occasional party idea, only if they opted in (consent, which you can withdraw at any time).
To keep sales records for tax (legal obligation).

For the solicitor: confirm each lawful basis, and whether the free-text note a guest may leave could contain special category data and what, if anything, that needs.

Who sees it

Only the host sees guests’ names and notes. Guests never see each other’s names. Venues see each party’s numbers only. We never sell your data, and the shops behind gift ideas never receive your name or your reply.

We use these providers to run the service:

Vercel, for hosting.
Neon, for the database, in London.
Resend, for sign-in and service emails.
Sentry, for error reports, with personal details removed before they’re sent.
Recraft, for invite artwork.
Stripe, for payments, when you buy credits.
A text message provider, when you sign in with your phone.
A music generation provider, when you add a personalised song.

For the solicitor: name the text message and music providers once contracts are signed, list where each provider processes data and the transfer safeguards for any outside the UK.

How long we keep it

Invites, replies and everything attached to them are deleted 90 days after the party. Unsaved drafts are deleted after 7 days. Anonymous step counts are deleted after 13 months. Backups roll off within 7 days of that. You can delete your account and invites sooner from your account page, or ask us to. Sales records are kept, without the link to your account, for as long as tax law requires.

Children

Hosts must be 18 or over. We only ask for a child’s first name and age, to put on the invite, and never use them for anything else.

Your rights

You can ask for a copy of your data, to correct it, to delete it, or to object to how we use it, by emailing us. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.