1. Who we are
This Privacy Policy explains how Confrmly handles information when you use our websites, invitations, RSVP forms, Holiday Cards and Memories, including memories.confrmly.com.
Service operator details awaiting completion: [LEGAL ENTITY NAME / ADDRESS]. Contact customers@confrmly.com for privacy questions and requests.
We are responsible for information used to operate accounts, support, billing and the Service. Hosts decide what information to request from guests and who to invite or admit to an album. Where data protection law distinguishes these roles, a host may be the controller of event and guest information and Confrmly may process it on the host's behalf. This notice does not replace a host's obligations to their guests.
2. Information we collect
- Accounts: email, authentication information and preferences. Password authentication uses our authentication provider; passwords are not stored as readable account records. Third-party sign-in, if selected, supplies the identity information needed for that sign-in.
- Events and invitations: names, dates, timezone, location, descriptions, designs, uploaded artwork and host settings.
- RSVP: guest names, contact details when requested, attendance, plus-ones, dietary preferences, song requests, notes and answers to custom questions. Only provide information appropriate for the event. Dietary answers can reveal sensitive information; hosts should avoid collecting unnecessary sensitive data.
- Cards and Memories: photos, messages, wishes, comments, reactions, display names or nicknames, moderation actions and participation in optional activities. Guests can participate in Memories without a Confrmly account. A guest identifier or session can still recognize their participation and enforce access and upload limits.
- Payments and offers: purchase identifiers, product or package, payment status, amount, currency, tax information returned by Stripe, credit balances, activations, refunds, disputes, promotion redemptions and gifts. Payment details are entered in Stripe's checkout, not in Confrmly's forms.
- Technical and support information: IP address, browser/device information, session identifiers, security and error logs, usage events and messages to support. Service and analytics providers may process this information as described below.
3. How we use information
We use information to authenticate users, create and display invitations, collect and update RSVP responses, manage guests, provide albums and guestbooks, run optional games, display TV slideshows, prepare exports, process purchases and credits, send service notifications, answer requests, prevent fraud and abuse, and improve reliability and usability.
Where a legal basis is required, processing may be necessary to provide a requested service or perform a contract, meet legal obligations, protect legitimate interests in security and operating the Service, or act on consent where required. An RSVP or photo upload is not permission to send unrelated promotional messages.
4. Memories and album visibility
Guests contribute photos, wishes, messages and reactions using an invitation link or QR code, a nickname, and a PIN if the host enables one. The nickname is displayed to participants; it does not make the contribution anonymous to the Service.
The host can view and manage the album and moderate contributions. People admitted through the album's access controls can see content made available in that album. Someone with a shared link and any required PIN may be able to join. Keep access within the intended group; an invitation link is not a guarantee of confidentiality.
Hosts can hide or remove inappropriate contributions, display visible album content on a TV or slideshow and download a ZIP export. People near the TV can see what it displays. Downloads, screenshots and copies made by hosts or guests can remain outside Confrmly after removal or expiry. Private host notes and private card replies are not intended to become public album posts.
6. Storage, retention and deletion
Account and RSVP information is retained while needed to provide account and event services, respond to requests and meet applicable legal, accounting and security obligations. Hosts can manage events and exports; contact us for account or guest-data deletion requests.
Standard Memories policy: uploads remain open until 30 days after the confirmed event end. Album content remains available until 3 calendar months after the event end, using the event's confirmed timezone. An explicitly granted extension or different entitlement is shown for that album. Check its displayed cutoff dates; Memories is not permanent archival storage.
Download available ZIP exports before retention ends. At expiry, album access ends and content is eligible for removal through cleanup. Removing content cannot recall earlier exports, TV recordings or copies held by others. Deletion from backups and operational systems may follow their normal lifecycle rather than happen instantly.
Limited purchase, tax, refund, dispute, security and abuse records may be retained where necessary after account or event deletion. Retaining a transaction record does not require keeping its album indefinitely.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent, and may complain to a data protection authority. Withdrawal does not change the lawfulness of earlier processing.
Write to customers@confrmly.com with the account or event and your request. We may verify identity or coordinate with the host before changing event records. We aim to respond within 30 days, subject to legally permitted verification and extensions. You may also contact the host about their use of event information.
9. Children
The Service is not directed to children under 16 or intended for children to use independently. Hosts are responsible for content and information they collect or upload, including any parental or guardian permission needed for photos or information about children. Do not upload content that exploits or endangers a child. Contact us if you believe a child has provided information inappropriately so we can investigate and act.
10. Security and international processing
We use HTTPS/TLS, access controls, password hashing through authentication infrastructure and database/storage authorization to protect information. No online service, access link or storage system is completely secure. Keep credentials, album links and PINs safe and report suspected unauthorized access.
Providers may process information in countries other than yours. Where applicable law requires safeguards for international transfers, appropriate transfer arrangements are needed. Contact us for information about arrangements relevant to your request; this notice does not promise all information stays in one country.
11. Changes and contact
We may update this policy as the Service or our practices change. Material updates may be communicated through the Service or by email where appropriate. The date above identifies this version.
For privacy, deletion, content or abuse questions: customers@confrmly.com. Include enough information to locate the issue, but do not send passwords, card details or private access tokens. The Terms of Service describe the rules for using Confrmly.