Privacy policy

RoseVP (rosevp.com) is an online invitation and RSVP service. The legal name, mailing address and phone are on the Legal notice page. Mailing address: . Phone: .

TODO — privacy officer title, RoseVP — privacy@rosevp.com — .

Hosts: email address, name, password (stored hashed by our sign-in provider) or Google sign-in, language preference, and payment records. We never see or store card numbers.

Guests (added by a host): name, email address, language, household and number of seats. A mobile number and SMS consent only if the guest opts in on the RSVP form. Delivery status of each text.

Replies: attendance, party size, meal choices and any note a guest writes. Meal choices and notes can reveal dietary, health or religious needs. Only share what you want your host to know.

Photos a host adds to an invitation or thank-you note.

Contact form: name, email, message and the IP address used to send it (to prevent spam).

Technical data: basic logs (IP address, browser type) needed to run and secure the service.

To create and deliver invitations, save-the-dates, reminders, updates and thank-you notes, and show replies to the host (to provide the service you asked for).

To process Event Pass payments and keep tax records (contract and legal obligation).

To answer support requests and keep the service secure (our legitimate interest in running a safe service).

We don't sell or rent personal information, we don't show ads, and we never use guest contact details for marketing.

The host sees the replies, meal choices and notes of the guests they invited, and when each guest first opened their invitation link.

When a host uses translation or "Write it for me", the event text (title, note, dress code, meal choices, host names) is sent to Cloudflare Workers AI to produce the other language or a draft. The editor labels that text as an AI translation to review before sending. Guest names and contact details aren't sent. We don't use the text to make a decision about a person.

We send emails to guests only on behalf of the host who invited them. Every email includes an unsubscribe link.

A guest can opt in to RoseVP Event Updates on the RSVP form, by entering a mobile number and checking a box that stays unchecked until they check it. Hosts cannot opt a guest in. We then send short texts about that one event: reply reminders, a save-the-date, important changes and a thank-you. Message frequency varies (about 1–5 per event). Message and data rates may apply.

We use mobile numbers only to send these event texts. We never use them for marketing or to text about other events.

Mobile numbers and SMS consent are never shared or sold to third parties for marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties. We share a number only with the providers that deliver the text: Twilio and the mobile carriers.

Reply STOP (or ARRÊT) to any text to stop all texts from RoseVP to that number. We confirm with one last text and keep the number on our do-not-text list, so it stays blocked even if a host adds it again. Reply START to get texts again. Reply HELP (or AIDE) for help, or write to bonjour@rosevp.com.

For each text we keep the number, the date, the type of text and whether it was delivered, for 24 months after the event date. The do-not-text list keeps only the number and the date of the request, for as long as we offer texting.

RoseVP's founder can access event and guest data only to provide support, fix problems and prevent abuse. Access is logged.

We share information only with the providers below, each under a written agreement, and only for the service they provide:

Supabase on Amazon Web Services (Canada, Montréal / ca-central-1): database, sign-in and photo storage

Cloudflare (global): hosting, content delivery, security, scheduled jobs, and Workers AI for translation and writing help

Resend (USA): email delivery from notify.rosevp.com

Stripe (USA): card payments. RoseVP is the seller. Link (Stripe) is the merchant of record only when Managed Payments is turned on, and then handles payment data under its own privacy policy.

Google (USA): Google sign-in, if you choose it

Twilio (USA): text message delivery, only while texting is switched on. Mobile carriers receive the number and the text to deliver it.

Cloudflare Web Analytics: cookieless visit counts on public pages

Account, guest and photo data are stored in Canada (Montréal). Cloudflare, Resend, Stripe and Google may process some of that information in other countries, including the United States. That can make it accessible to authorities there. We assess the protection each provider offers before sharing information with it. A Québec Law 25 transfer assessment is part of going live.

Guest lists, replies and event photos: 24 months after the event date, then deleted or anonymized. Hosts can remove guests or delete an event at any time.

Host accounts: until you delete your account from your Account page or ask us to. We delete it within 30 days of a request.

Contact form messages: up to 24 months.

Payment records: as long as tax law requires (generally up to 7 years).

You can ask to access, correct or delete your personal information, to receive it in a structured format, or to withdraw your consent. If you're in Québec, you can also ask us to stop disseminating your information or to de-index it. Write to privacy@rosevp.com. We may ask you to confirm your identity, and we reply within 30 days.

You can download your data from your Account page.

If you're not satisfied with our answer, you can complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

A host added you to their guest list. To have your information removed, use the Remove my information link on your invitation, ask your host, or write to privacy@rosevp.com with the event name. We'll stop all emails and texts to you and delete your information within 30 days.

Account holders must be 18 or older. Hosts may add guests under 14 only with a parent's or guardian's consent. A parent can ask us to remove a child's information at any time.

We don't sell or share personal information for advertising. We honour Global Privacy Control signals.

Access to data is restricted by account. Photos are stored privately and shown only through short-lived links. Each guest's link is a long random code. Data is encrypted in transit and at rest.

If a security incident puts your information at risk of serious harm, we'll tell you and the authorities as the law requires.

If we make a significant change to this policy, we'll email account holders before it takes effect. The date at the top shows the latest version.