Privacy Policy

If you create an account: your email address, a password (stored only in protected, scrambled form by our sign-in provider), and an optional display name. If you choose “Continue with Google”, Google shares your name and email address with us.

Invitation details you add: celebration titles, dates, times, time zone, venue or virtual meeting details, notes, schedules, dress-code colours, playlist links and up to five photos per celebration.

Guest lists you add (optional): invitee names and, if you choose, their email address, phone number and a private note.

Guest replies: when a guest replies to an invitation we store their name, whether they're attending, the number in their party, and any optional contact details or answers to the host's questions.

Support messages: the name, email address, topic, reference and message you send through our contact form, plus a one-way scrambled code derived from your network address, used only to limit spam.

Payments (not yet active): when purchases open, payments will be processed by Stripe. We will receive confirmation of the payment, amount and a payment reference — never your full card number.

• To run your account and keep your drafts and invitations saved.
• To show your published invitation to the people you share its link with.
• To collect guest replies and show them privately to the host.
• To respond to support messages and investigate problems.
• To keep the service secure and prevent abuse.

Guests don't need an account. A published invitation is reachable only through its private link and asks search engines not to list it. Guest replies are visible only to the host who created the event — not to other guests and not publicly.

Each guest receives a private link to change their reply. That link is held only in their browser address; we store only a scrambled version of it. We don't send marketing to guests or sell guest information.

Hosts are responsible for the guest details they add themselves and for sharing their invitation link with care. Guests who want their reply changed or removed can ask the host, or contact us.

Photos you upload are stored privately. Guests see them only through the published invitation; the files themselves are not publicly listed, and access stops when the invitation is unpublished or deleted.

We use your browser's storage to keep you signed in, to remember where to return you after signing in or resetting a password, and to play the homepage confetti only once per visit. These are needed for the site to work.

We don't use advertising cookies, tracking pixels or third-party analytics. If that changes, we'll update this policy and ask for consent where required.

We share information only with the companies that help us run the service, and only as needed for that purpose:

• Hosting and cloud backend (Lovable and its infrastructure partners) — stores accounts, invitations, photos, guest replies and support messages.
• Google Fonts — our pages load typefaces from Google, which receives your device's network address and browser details when fonts load.
• Google — only if you choose to sign in with Google.
• Stripe — payment processing, once purchases open.

These providers may process data in other countries. We may also disclose information if required by law or to protect people and the service.

• Unpublished drafts stay in your account until you delete them. Previously published invitations remain subject to the event-based retention period below.
• Events you move to Trash can be restored for 30 days, then are permanently deleted along with their photos, guest list and replies.
• Published invitations and RSVPs are retained for 12 months after the event date, unless you delete the event sooner. Unpublishing takes the page offline but does not restart this period.
• Support messages are retained for 12 months after the inquiry is resolved.

We use encrypted connections, private storage, per-account access rules and limited administrator access. No system is perfectly secure, but we work to protect your information and will act promptly if a problem occurs.

You can view and edit your invitations and display name in My Celebrations, and delete events at any time. You can ask us to access, correct or delete your information, or to close your account, by contacting us. Depending on where you live you may have additional rights, and you can complain to your local data-protection authority.

Customer accounts are intended for adults aged 18 and older. Guests do not need an account to reply to an invitation.

For privacy questions, use the Contact Us form or email support@savetheyay.com. We'll post any changes here with a new effective date.