Privacy policy
Draft: this text is being finalised.
Who we are
oui.rsvp is run by [TODO: legal entity name], [TODO: address], [TODO: Chamber of Commerce (KvK) number]. For privacy questions, email [TODO: privacy email].
What we collect
For couples: your email address and the content of your invitation. For guests: the names, attendance, dietary needs, email address and message you enter when you RSVP. We don't use advertising trackers; our visit statistics are cookieless and don't store IP addresses.
Why and on what basis
We process this data to provide the invitation and RSVP service (performance of a contract) and to keep it secure (legitimate interest). Guests' data is processed on behalf of the couple who invited them.
Who helps us
Hosting and database: Vercel and Supabase. Email: Resend. Spam protection: Cloudflare Turnstile and Upstash. [TODO: confirm processors, regions and data processing agreements].
How long we keep it
Invitation and guest data is deleted [TODO: confirm, e.g. 6 months] after the event, after a warning to the couple. Account data is kept until you delete your account.
Your rights
You can access, correct, export or delete your data, and object to or restrict its processing. Contact us at [TODO: privacy email]. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).