1. Who we are

MELA RSVP ("we", "us", "our") operates the event management platform at melarsvp.com. We are the data controller for personal data collected through this service. For any privacy-related enquiries, contact us at contact@melarsvp.com.

2. Data we collect

Account data

Email address and password when you create an organiser account.

Event and RSVP data

Event details you create (title, date, location, description). Guest responses submitted via RSVP forms: name, email address, attendance status, dietary preferences, and guest count where requested.

Payment data

Payments are processed by Stripe. We do not store card numbers or full payment details. We receive a Stripe customer ID and transaction confirmation only.

Usage data

Standard server logs including IP address, browser type, and pages visited. Used solely for security and service improvement.

3. How we use your data

To provide and operate the MELA RSVP service
To send transactional emails (RSVP confirmations, event reminders) via Resend
To process payments via Stripe
To detect and prevent fraud or abuse
To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party services

Supabase — database and authentication hosting. Data stored on Supabase servers in the EU.

Stripe — payment processing. Governed by Stripe's privacy policy.

Resend — transactional email delivery. Email content and recipient addresses are processed by Resend.

Netlify / Vercel — hosting infrastructure.

5. Data retention

Account and event data is retained for as long as your account is active. When you delete your account, your event data and associated RSVP responses are permanently deleted within 30 days. Guest RSVP data is retained only for the duration of the event's lifecycle and deleted upon organiser request or account closure.

6. Your rights

Under applicable data protection law, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing of your data
Data portability — receive your data in a machine-readable format
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email contact@melarsvp.com. We will respond within 30 days.

7. Cookies

We use essential cookies only: session authentication cookies (required for login) and a theme preference cookie. We do not use advertising or tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.

8. Security

All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Access to personal data is restricted to authorised systems only. Despite these measures, no internet transmission is 100% secure and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on the site. Continued use of MELA RSVP after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact us at contact@melarsvp.com.

Privacy Policy