Privacy Policy

1. Introduction

At Confrmly, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. By using Confrmly, you agree to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Authenticate users and secure accounts
• Deliver event invitations and RSVP confirmations
• Enable hosts to manage their guest lists
• Send important service notifications and updates
• Improve and optimize the Service
• Comply with legal obligations

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following circumstances:

• With your explicit consent
• With service providers who assist in operating the Service (e.g., database hosting, email delivery) under strict confidentiality agreements
• When required by law, regulation, or court order
• To protect the rights, property, or safety of Confrmly, our users, or the public

Guest information collected through your events is accessible only to you as the host and to us as the service provider. Guests' data is not shared with other hosts or third parties.

5. Data Storage & Security

Your data is stored securely using Supabase's managed database infrastructure with row-level security (RLS) policies ensuring strict data isolation between users.

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and access controls. However, no method of transmission or storage is 100% secure.

We retain your data for as long as your account is active. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. These are strictly necessary for the Service to function and cannot be disabled.

We do not use tracking cookies for advertising or third-party analytics beyond basic, anonymized usage metrics to improve the Service.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain processing of your data
• Data portability — receive a copy of your data in a machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us. We will respond within 30 days.

8. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email or a prominent notice on the Service. Your continued use after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us. We are committed to addressing your concerns in a transparent and timely manner.