Privacy Policy for Grape4invite
Effective Date: May 19th, 2025
1. Introduction
Welcome to Grape4invite, an RSVP app designed to simplify event management. This Privacy Policy explains how we collect, use, and protect your personal information.
Important: When a guest submits an RSVP, their data is immediately sent to the event host via email. Grape4invite does not control this data after submission.
2. Information We Collect
a. Event Hosts:
- Account Information: Full name, email address, optional password (for email-based login), or Google Sign-In credentials.
- Event Details: Event name, description, location, date, invitation card images, and custom RSVP fields.
- Guest List Management: Guest names, RSVP responses, and custom fields (e.g., dietary preferences, age).
- Usage Data: Session tokens, language preferences, and device data (e.g., FCM tokens for notifications).
b. Event Guests:
- Mandatory: Full name.
- Custom Fields (Host-Defined): Optional details like age, email, phone, or dietary preferences, as requested by the host.
- Guest Choice: Guests may choose what to provide unless fields are mandatory.
- Opt-Out: Guests may choose not to RSVP if they disagree with providing mandatory data set by the host.
c. Google Sign-In Data:
- Data Collected: When you sign in using Google Sign-In, we collect your email address and name from your Google account via Google’s OAuth API.
- Purpose: Your email address is used to create and manage your Grape4invite account, authenticate your identity, and send event-related emails (e.g., invitations, confirmations). Your name personalizes your account and event interactions.
- Storage: Google Sign-In data is stored securely in our database, hosted on AWS, with encryption and access controls.
- Sharing: We do not share Google Sign-In data with third parties, except as needed for app functionality (e.g., AWS SES for email delivery) or legal compliance.
- Compliance: We adhere to the Google API Services User Data Policy.
3. How We Use Your Information
a. Event Hosts:
- To create and manage host accounts.
- To allow hosts to manage events and guest lists.
b. Event Guests:
- To confirm attendance at an event.
- To send RSVP details to the host.
4. Who Controls Guest RSVP Data?
Once a guest submits their RSVP, their data is immediately sent to the event host via email.
- Even if data is deleted from our servers, the host still has it in their email inbox.
- RSVPing through Grape4invite is similar to RSVPing via a message, email, or phone call — the host has full control over the guest's data.
- Make sure you trust the host before providing your data. Only share information you are comfortable giving to the event host.
5. Data Security
We use the following measures to protect stored data, but we do not control how hosts handle RSVP data sent to their email inboxes:
- Encryption: Data is encrypted in transit (HTTPS) and at rest in our database and AWS S3.
- Access Controls: Only authorized personnel access user data, with strict authentication.
- Session Security: Session tokens are securely generated and validated to prevent unauthorized access.
6. Data Sharing
Grape4invite does not share guest data with third parties. The host is the only recipient of RSVP data.
7. Third-Party Services
- AWS: We use Amazon Web Services for:
- Hosting: AWS EC2 hosts our servers.
- Storage: AWS S3 stores event-related files (e.g., invitation images, guest list reports).
- Email Delivery: AWS SES sends emails (e.g., RSVPs, confirmations).
- Google Services: Google Sign-In for authentication and Google Maps for event locations.
- Google Play: Validates in-app purchases for premium features.
- Disclosure: These services process data per their privacy policies, linked where applicable.
8. Your Data Rights
- Access: Request a copy of your personal data.
- Correction: Update your account details (e.g., name, email) via the app.
- Deletion: Request account deletion by contacting us.
- Opt-Out: Opt out of non-essential emails while keeping event notifications.
- Contact: Email legal@squaregrape.net to exercise these rights.
9. Children’s Privacy
- Age Limit: Grape4invite is not for users under 13. Minors under 13 should not use the app.
- Parent-Provided Data: Parents or guardians may provide information about minors (under 13) or other individuals (e.g., friends, spouse, relatives) when RSVPing.
- Responsibility: The person submitting the RSVP is responsible for obtaining consent from individuals whose data they provide, including for minors or others.
- Contact: Report concerns to legal@squaregrape.net.
10. Cookies and Tracking
We use minimal cookies or similar technologies (e.g., session tokens) to maintain app functionality. You can manage cookies via your browser or device settings.
11. Contact and Consent
- Consent: By using Grape4invite, you agree to this Privacy Policy.
- Updates: We may update this policy and will notify users of significant changes.
- Contact: Reach us at legal@squaregrape.net for questions or concerns.
12. Governing Law
This Privacy Policy is governed by the laws of the State of Florida, USA.