Privacy & Data Protection
Privacy Policy
Last Updated: November 2026
1. Overview & Commitment
Your privacy is fundamental to JoyFul. We believe event rosters and guest contact details belong strictly to the host. We do not sell your personal data or your guests’ contact information to advertisers, data brokers, or marketing networks.
2. Information We Collect
A. Host Account Information:
When you create an organizer account, we collect your full name, email address, and encrypted password credentials.
B. Event Details:
Titles, subtitles, event dates, times, venue locations, and optional custom instructions provided during event creation.
C. Guest RSVP Data:
When attendees RSVP via a public event link, we collect guest names, email addresses, party attendance size, dietary preferences, and optional personal messages to the host.
3. How We Use Collected Information
- To provide, host, and render your event invitation pages.
- To compile attendance rosters, dietary summaries, and exportable CSV reports for hosts.
- To authenticate host sessions securely using JSON Web Tokens (JWT).
- To detect, prevent, and mitigate fraud, abuse, and security threats.
4. Zero Data Leaks Architecture
Our platform enforces strict database Row Level Security and scoped SQL functions. Guest rosters and attendee lists are accessible only to the authenticated host who owns the event. Public attendees viewing an invitation cannot access or inspect other attendees’ contact details or identities.
5. Data Retention & Deletion
Hosts may delete individual events at any time from the dashboard. When an event is deleted, all associated RSVP entries, guest emails, and attendee submissions are permanently deleted from our primary database records.
6. Data Rights & Inquiries
Under applicable data privacy regulations (such as GDPR or CCPA), you have the right to request access to, correction of, or deletion of your personal data. Inquiries should be sent to privacy@joyful.events.