Privacy Policy

We collect only what we need to run invitations and RSVPs. That includes information you give us, information hosts give us about their guests, and a limited amount of technical information.

Account information

When you create an account we collect your name, email address and password. Passwords are stored only as a secure one-way hash, never in readable form. We also record when your email address was confirmed and basic account settings.

Event information

When you create an event we store what you enter: the event name, host name, date, time and time zone, location, description, RSVP deadline, ceremony details (such as a muhurtham or puja name), dress code, your invitation design and wording, and any images you upload for your design.

Photos you upload

Photos you add to an invitation belong to you. Before upload, your browser resizes them and re-encodes them, which removes embedded camera data such as GPS location. We store them privately, show them only on your own invitation (to you and the guests you share it with) and delete them when you delete them or the event. We do not use your photos to train AI models, in marketing or advertising, or in any public gallery, and they are only reachable through random links that can’t be guessed.

Guest names, email addresses and phone numbers

Hosts add guests by typing them in or importing a CSV or Excel file. For each guest we store the name and, if the host provides them, an email address and phone number, along with how many additional guests they may bring. Each guest gets a unique invitation code.

RSVP responses

When a guest replies, we store their response (attending, not attending or maybe), the number of additional guests, a meal headcount where the event asks for one, any message they write to the host, and when they replied. We also note when an invitation page was first and last opened, so the host can see it was viewed.

Email and SMS communication data

• Email: for emails we send (invitations, RSVP confirmations, updates and account emails) we keep a delivery record: recipient, type of email, time sent and delivery status (for example delivered, bounced or opened). We also keep unsubscribe, bounce and complaint records so we don’t email those addresses again.
• SMS: if a guest opts in to text messages on their invitation page, we store the mobile number they entered, the date and time they opted in, and which version of the consent wording they agreed to. If they opt out (by unticking the box or replying STOP), we keep a record of the opted-out number so we don’t text it again.

Technical information

Like most websites, our servers receive your IP address, browser type and the pages requested. We use this to keep the service secure, prevent abuse (for example, limiting repeated requests) and diagnose errors.

We use information to:

• provide the service: create events and invitations, deliver invitations, collect RSVPs and show hosts their guest list and responses;
• send the messages the service depends on: invitations, RSVP confirmations, reminders and event updates by email, and by SMS only to guests who opted in;
• send account emails, such as email confirmation and password resets;
• keep RSVPza secure, prevent spam and abuse, enforce sending limits and our Terms;
• fix problems and improve the product, using aggregated and technical information;
• respond to your questions and requests, and meet legal obligations.

We don’t sell personal information, and we don’t use guest information to advertise to guests.

Every guest receives a personal invitation link containing a long, random code. Anyone with the link can view that invitation and reply to it, so guests shouldn’t share their link publicly. Guests don’t need an account to reply.

• Invitation pages are marked so search engines don’t index them.
• An invitation page shows the event’s details and that guest’s own response. It does not show other guests’ names or contact details.
• Guest information is visible only to the host who created the event (and to RSVPza staff when needed to run the service, investigate abuse or provide support).
• Hosts can remove a guest or delete an event at any time, which removes that guest information from the event.

Hosts decide which guests to invite and are responsible for having the right to contact them. If you received an invitation and have concerns, you can use the unsubscribe or report link in the email, or contact us at support@rsvpza.com.

RSVPza sends text messages only to people who explicitly opt in. A guest opts in by entering their mobile number and ticking an SMS consent box (which is never pre-ticked) on their invitation page. Opted-in guests may receive event invitations, RSVP confirmations, event reminders and event updates for events they’re invited to.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out of SMS messages and HELP for assistance.

• SMS consent is optional and is not required to reply to an invitation or to create or use an RSVPza account.
• You can withdraw consent at any time by replying STOP to any message, or by unticking the box on your invitation page and updating your response.
• We keep opt-out (suppression) records so we don’t text a number that has opted out, unless its owner explicitly opts in again.

See SMS Opt-In & Text Message Terms for how opting in works, sample messages and how to get help.

We do not sell, rent or share mobile phone numbers or SMS consent information with third parties for their own marketing or promotional purposes. Mobile numbers and SMS opt-in data are used only to send the event messages described above, and are shared only with the service providers that deliver those messages for us (see “Service providers”).

We use one essential cookie to keep you signed in. It’s set only when you log in, can’t be read by page scripts, and is removed when you log out. The site may also save small preferences in your browser’s local storage.

We don’t use advertising cookies or third-party ad trackers. For reliability we collect server-side performance and error telemetry (such as response times and error details) through Microsoft Azure Monitor. Emails may contain standard open and click tracking so hosts can see whether an invitation was delivered and opened.

We use a small number of trusted providers to run RSVPza. They process information on our behalf, under contract, and only to provide their service to us:

• Microsoft Azure hosts the website, application and database, and stores uploaded images.
• Azure Communication Services (Microsoft) delivers our emails and text messages, and reports delivery status back to us.
• Azure Monitor / Application Insights (Microsoft) collects server logs and diagnostics.

We may also disclose information if required by law, to protect the rights, safety or property of our users or others, or as part of a merger or sale of the business (in which case this policy continues to apply to your information). Mobile numbers and SMS consent are never shared for anyone’s marketing, as described above.

• Accounts and events are kept while your account is active. Deleting a guest or an event removes that data from our active database right away.
• Account deletion: email support@rsvpza.com from your account’s address and we’ll delete your account, events, guest lists and responses within 30 days.
• Delivery records for emails and texts are kept for as long as needed for the service, security and troubleshooting.
• Opt-out and suppression records (unsubscribed or bounced email addresses, opted-out phone numbers) are kept for as long as we operate, even after an event or account is deleted, so we continue to honor them.
• Backups are kept for a limited period and then overwritten.

We protect information with industry-standard measures: encrypted connections (HTTPS) everywhere, hashed passwords, access limited to the people who need it, rate limiting and abuse detection, and infrastructure hosted in Microsoft Azure data centers. No system is completely secure, so please use a strong, unique password and keep invitation links private. If you believe your account has been compromised, contact us at support@rsvpza.com.

Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to or restrict how we use it. You can:

• update your events and guest lists in your dashboard at any time;
• unsubscribe from invitation emails with the link in any email we send;
• stop text messages by replying STOP, or by unticking SMS consent on your invitation page;
• ask us to access, correct or delete your information by emailing support@rsvpza.com.

If you’re a guest, your information was added by the event’s host. You can ask the host to update or remove it, or contact us and we’ll help. We won’t treat you differently for exercising your rights. You may also contact your local data protection authority.

RSVPza accounts are for adults: you must be at least 18 to create one. The service isn’t directed to children under 13, and children shouldn’t provide personal information to us. Hosts planning children’s events should invite a parent or guardian rather than the child. If you believe a child has given us personal information, contact us at support@rsvpza.com and we’ll delete it.

RSVPza is operated using Microsoft Azure data centers and may process information in countries other than the one you live in. Wherever it’s processed, we protect it as described in this policy.

We may update this policy as RSVPza changes. We’ll change the “Last updated” date above and, for significant changes, let account holders know by email or in the app before they take effect. We won’t use mobile numbers or SMS consent in new ways without asking for consent again.

RSVPza is operated by Vknowtech Solutions Inc, doing business as RSVPza. For privacy questions or requests, email support@rsvpza.com or write to us at:

You can also read our Terms & Conditions.