Privacy Policy

Eventoura (“Eventoura,” “we,” “us”) is operated from Sri Lanka and helps you create digital invitations and manage your guests. This policy explains what information we collect when you use our website and dashboard, how we use it, and the choices you have. By using Eventoura, you acknowledge that your information will be handled as described in this Privacy Policy.

Information we collect

• Account information — your name, email address, and information required to authenticate your account. Organizer and individual accounts may also have an assigned plan.
• Content you create — event details (title, date, venue, address, description, map location), cover and gallery images you upload, your agenda, and budget entries.
• Guest information you add — if you manage guests, the names, phone numbers, party/side, seating and RSVP status you enter for them.
• RSVP responses — when a guest responds to an invitation, the name, email, attendance, party size, and any message they submit.
• Technical data — essential cookies required to keep you securely signed in, plus basic logs needed to operate and secure the service.
• Usage analytics — information about how you use the site (see “Cookies & analytics” below): pages viewed, actions such as creating an invitation or submitting an RSVP, device and browser type, and approximate location derived from your IP address.

How we use your information

• To provide the service — building and publishing your invitation page, tracking RSVPs, and managing guests, tables, agenda and budget.
• To authenticate you, including sending one-time verification and password-reset codes by email.
• To operate, maintain, secure, and improve Eventoura.
• To respond to your requests and provide support.

Legal basis for processing

Where applicable, we process personal information to provide the services you request, comply with legal obligations, protect our legitimate interests, or where you have given consent (such as for analytics cookies).

How we share information

We do not sell your personal information. We share it only with:

• Service providers who run Eventoura on our behalf — our hosting, database and file-storage provider, our email provider for verification and reset messages, and our analytics provider (PostHog). They may process data only to provide these services.
• People you choose — information included in a published invitation is intended to be visible to anyone who has the invitation link. Please avoid including sensitive personal information in publicly shared invitations.
• Legal reasons — when required by law or to protect the rights, safety, and security of Eventoura and its users.

Your information may be processed in countries other than your own, including the United States, where our service providers operate.

Cookies & analytics

We use essential cookies required to keep you securely signed in. They are needed for the dashboard to work and are not used for advertising or cross-site tracking.

We also use an analytics service (PostHog) to understand how Eventoura is used so we can improve it. Analytics cookies help us count visits and see which features are used. We never use analytics for advertising, and we do not sell this data. You can limit analytics through your browser settings, or contact us at eventoura.rsvp@gmail.com with any questions about analytics.

Data retention

We keep your account and event data for as long as your account remains active or as needed to provide our services. You can delete your invitations and guests at any time from the dashboard, and you can ask us to delete your account and associated data — see “Your rights” below. After account deletion, backup copies may remain for a limited period before being automatically removed.

Security

We use appropriate technical and organizational measures to protect your information, including encryption in transit and secure authentication practices. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.

Your rights & choices

You can access and update most of your information directly in the dashboard. You can also ask us to provide a copy of your personal information, correct it, delete it, withdraw your consent (for example, to analytics), or object to certain processing where applicable law gives you that right. Contact us at eventoura.rsvp@gmail.com — we will respond within a reasonable period and delete information unless we are required to retain it by law.

If you manage guests

When you add guests or run events for clients, you are responsible for the personal information you enter about other people. You represent that you have the necessary permission or other lawful basis to provide guest information to Eventoura. We process that information on your behalf to provide the service.

Third-party services

Eventoura may contain links to third-party websites or services — for example, map links or social links on an invitation. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

Children's privacy

Eventoura is intended for adults. We do not knowingly collect personal information from children. An event may be about a child (for example a birthday or baby shower), but accounts must be held by an adult.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the “Last updated” date above, and significant changes will be highlighted where appropriate.

Contact us

Questions about this policy or your data? Email us at eventoura.rsvp@gmail.com. Eventoura is operated from Sri Lanka.