The fine print,
in plain English.

data controller

simplyrsvp is run as a sole trader by Dominic M Brause. Postal address and email are under the Imprint tab.

what we store

Two kinds of accounts, two kinds of data.

• Hosts — an email address and any details you add to your profile, plus the events you create and the invitations you send.
• Guests — the name and email you supply when you reply, the event you replied to, and whether you clicked our 12‑hour confirmation message. Two replies from the same address are merged so you only count once.

email scrub at event end

Once an event is over, we replace each guest’s plaintext email with a salted SHA-256 hash and null out the original address. The hash lets a guest later sign up for an account and claim their reply history; if they never sign up, the row isn’t restorable. After event completion neither we nor anyone with database access can contact past attendees again.

what we send by email

• Sign-in links and login confirmations.
• For guests: a single confirmation roughly 12 hours after you reply, plus any event-specific updates the host triggers (e.g. cancellation, time change).

No newsletters. No marketing. No third-party promotions.

what we don’t do

We don’t sell your data. We don’t profile your guest list. We don’t run third-party ad or tracking pixels. We don’t share your address book with anyone.

sub-processors

We use a hosting provider for the application and database, a transactional email provider for the messages above, and Google as an optional sign-in provider when you choose “sign in with Google”. Current names and locations are listed on request — mail privacy@simplyrsvp.co.

your rights

Under GDPR you can ask for a copy of your data, ask us to correct or delete it, or export your events. Drop us a line and we’ll get back to you within a working week. If you think we’ve mishandled your data you can also complain to the Irish Data Protection Commission.