Legal
Privacy Policy
Last updated: May 1, 2026
1. Information We Collect
We collect the following types of information:
- Account information: name, email address, and profile photo when you sign up
- Event data: event details, guest lists, invitation designs you create
- Guest information: names, phone numbers, and RSVP responses provided by you or your guests
- Usage data: how you interact with the Service (pages visited, features used)
2. How We Use Your Information
- Provide and improve the Service
- Send invitations and SMS messages on your behalf
- Track RSVPs and manage guest check-ins
- Send you service-related notifications
- Analyze usage patterns to improve the product
3. Data Sharing
We do not sell your personal data. We share information only with:
- SMS providers: to deliver invitation messages
- Cloud infrastructure: Supabase (database), Firebase (authentication), Cloudflare (hosting)
- Legal requirements: if required by law or to protect our rights
4. Data Storage and Security
Your data is stored securely using industry-standard encryption. We use Row Level Security to ensure your event data is isolated and accessible only to you. All connections are encrypted via HTTPS.
5. Guest Data
Guest information (names, phone numbers, RSVP responses) is stored per event and is only accessible to the event owner. When an event is deleted, all associated guest data is permanently removed.
6. Your Rights
You can:
- Access and download your data at any time
- Update or correct your account information
- Delete your account and all associated data
- Request a copy of data we hold about you
7. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising cookies.
8. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes through the Service or via email.
9. Contact
For privacy-related questions, contact us at privacy@tiricard.com.