YayRSVP (“we”, “us”) is operated by [Company legal name]. This policy explains what information we collect when you host a party or answer an invitation, what we do with it, who we share it with, and the choices you have. It applies to the YayRSVP website, the invitations and party links it serves, and the emails and text messages it sends.
The short version
- We collect what it takes to send invitations and collect RSVPs: hosts' accounts, guest lists and replies.
- Children don't have accounts. Hosts and parents give us only a child's first name, the age being celebrated, and anything they choose to add.
- We don't sell personal information, we don't show ads, and we don't use third-party analytics or tracking.
- Mobile numbers and SMS consent are never shared with or sold to anyone for marketing.
- Delete your account yourself from Settings, and we delete it with everything it owns.
Information we collect
From hosts (account holders)
- Account: your name, email address and password (stored only as a one-way hash). If you sign in with Google, we receive your name and email address from Google.
- Parties: what you enter about each party: title, host names, date, time and time zone, RSVP deadline, venue and address, description, notes for parents, gift and dress-code notes, the invitation card text, a photo of the birthday child if you upload one, capacity, privacy and reminder settings, and any questions you ask guests.
- Guest lists and saved groups: the names, email addresses and mobile numbers of the families you invite, which you type, paste or upload.
- Other content: announcements and thank-you notes, gift lists, photos you add to a party album, co-hosts' email addresses, and, if you use the AI drafting features, the text you type or the party details being drafted.
About guests
Guests don't need an account. We hold information about guests that either the host or the guest gives us:
- parent or guardian names, children's first names, email addresses and mobile numbers;
- RSVP answers: whether you're coming, how many children and adults, the names of who's coming, allergy and dietary notes, a note to the host, and answers to the host's questions;
- gift-list claims and notes, and photos you add to the party album (shown with your first name);
- for texts: your mobile number and a record of your consent (when you gave it, the consent wording shown, and the IP address it came from), plus any STOP or HELP replies.
Children
Invitations are about children's parties, so hosts and parents provide a child's first name and the age being celebrated, and may add a photo or allergy notes. See Children's privacy.
Collected automatically
- a sign-in session cookie (see Cookies and browser storage);
- your IP address, used for rate limits, security and consent records, and the browser details attached to problem reports;
- server logs of requests and errors, which record the page route but not the secret parts of invitation links;
- delivery information from our email and SMS providers (delivered, bounced, marked as spam, opted out), and invitation counts the host sees (invited, delivered, replies).
When you contact us
If you use “Report a problem”, we receive your description, the page it was sent from and, if you add it, your email address.
How we use information
- to run the service: create invitations, send them by email or text, collect RSVPs, and show hosts their guest list;
- to send messages about a party you host or are invited to: invitations, RSVP receipts, reminders, changes to the time or venue, host announcements and thank-you notes, gift-list updates, and account emails such as sign-in links;
- to keep the service secure: sign-in protection, rate limits, abuse prevention and fixing problems;
- to honor your choices, such as unsubscribes and STOP replies;
- to comply with the law.
We don't use your information for advertising, and we don't build profiles of guests.
Text messages (SMS)
Guests can get texts about a party: their invitation, RSVP reminders and event updates. The SMS terms explain the program, how consent is given, and how to opt out (reply STOP) or get help (reply HELP).
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile numbers and SMS opt-in and consent data are never shared with or sold to third parties or affiliates for marketing or promotional purposes. All of the above categories of sharing exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Our SMS provider (AWS End User Messaging) processes mobile numbers only to deliver our messages.
How long we keep information
- Account information: until the account is deleted.
- Parties, guest lists, replies, gift lists and photos: until the host removes them (guests, gifts and photos can be deleted; parties can be archived) or the host's account is deleted.
- Sign-in sessions: 24 hours. Sign-in and email-confirmation links expire within 24 hours, most within 15 minutes.
- Server logs: about 30 days.
- Deleted photos are removed at once and purged from storage backups within 30 days.
- Database backups for disaster recovery roll off after 35 days.
- Unsubscribes, bounces and STOP opt-outs are kept so we keep honoring them, and some records may be kept longer where the law requires it.
Your choices and rights
- Hosts can view and edit their parties, guest lists and groups at any time from the dashboard.
- Guests can change their reply from their invitation link, delete photos they added, and ask the host to remove them from the guest list.
- Emails: every invitation email has an unsubscribe link. Texts: reply STOP.
- Delete your account: sign in and go to Settings → Delete account. Confirm with your email address (and your password, if your account has one), and we permanently delete the account and everything it owns at once: its parties, guest lists, replies, photos and album (including photos guests added), gift lists, saved groups and co-host seats on other people's parties. Invitation links to its parties stop working; guests aren't notified. We email you a confirmation. If a gift bought through the gift fund is still on its way, deletion waits until it's delivered or refunded. Can't sign in? Email [Contact email] from your account's address and we'll delete it for you.
- Guests and parents can ask us to access, correct or delete information about them or their child at the same address.
Depending on where you live, you may have further rights under local privacy law. We won't treat you differently for using them.
Children's privacy
YayRSVP is for adults: parents and caregivers planning or attending a party. Children cannot create accounts, and we do not knowingly collect personal information directly from children under 13. What we hold about a child is provided by a host or a parent and kept to a minimum: a first name, the age being celebrated, and only what the adult chooses to add, such as allergy notes or a photo. Children's information is shown only to the party's host and invited families, within the host's privacy settings.
A parent or guardian can ask us to review or delete their child's information at [Contact email]. If we learn that a child has given us personal information directly, we delete it.
Security
We protect information with encryption in transit (HTTPS), passwords and sessions stored only as hashes, secret per-guest invitation links, short-lived links for photos, location data removed from uploaded photos, encrypted delivery addresses, and access limited to the people who need it. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.
Changes to this policy
If we change this policy we will update the effective date above, and tell account holders by email before a material change takes effect.
Contact us
[Company legal name]
[Mailing address]
Email: [Contact email]