Privacy Policy
Your privacy is important to us. This policy explains how Fancy RSVP collects, uses, and protects your personal information.
Last Updated: July 16, 2026
1. Information We Collect
We collect information you provide directly when you create an account, set up events, or communicate with us. This includes:
Personal Identification Information: Your name, email address, phone number, and billing address when you register for an account or subscribe to a paid plan.
Event Data: Event details you create, including event names, dates, venues, guest lists, RSVP responses, seating arrangements, and any custom fields you configure.
Guest Information: Names, email addresses, phone numbers, dietary preferences, and RSVP responses of guests you add to your events. You are responsible for obtaining appropriate consent from your guests before adding their information.
Payment Information: When you subscribe to a paid plan, our payment processor (Stripe) collects and processes your payment card details. We do not store full credit card numbers on our servers.
Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, click patterns, session duration, and referring URLs.
Device Information: Browser type and version, operating system, device identifiers, IP address, and screen resolution to ensure optimal performance and security.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services. Specifically, we use your data for the following purposes:
Service Delivery: To create and manage your account, process your events, send RSVPs and reminders to your guests, and provide the features you've subscribed to.
Communication: To send you service-related notices, including account verification, billing reminders, security alerts, and support responses. With your consent, we may also send marketing communications about new features and promotions.
Analytics & Improvement: To understand how users interact with our platform, identify trends, diagnose technical issues, and develop new features that better serve our community.
Personalization: To customize your experience, recommend templates, and tailor content to your event planning needs and preferences.
Security & Fraud Prevention: To protect against unauthorized access, detect suspicious activity, and ensure the integrity of our platform and your data.
Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
3. SMS/Text Messaging Communications & Consent
Fancy RSVP offers SMS text messaging as an optional communication channel to help event hosts keep their guests informed. This section describes exactly what phone number data we collect, why we collect it, how consent is obtained, and your rights under U.S. telecommunications law, including the Telephone Consumer Protection Act (TCPA) and CTIA Messaging Principles and Best Practices.
Purpose of Collection: We collect mobile phone numbers solely to deliver event-related transactional and informational text messages, including: (a) RSVP confirmation receipts, (b) event date, time, or venue change alerts, (c) event reminders and countdown notifications, (d) day-of check-in and logistics instructions, and (e) responses to a guest's own inquiries submitted through the platform. We do not use phone numbers collected through our SMS program to send marketing, promotional, or advertising messages of any kind, and we do not use this data for any purpose other than the event-related communications described here, unless you provide separate, explicit opt-in consent for such use.
How Consent Is Collected (Opt-In): A phone number can only enter our system in one of two ways, both of which require affirmative consent: (a) a guest voluntarily submits their own phone number directly through our public RSVP form and affirmatively confirms they agree to receive text messages related to that specific event from Fancy RSVP on behalf of the event host; or (b) an event host (organizer) manually enters or imports a guest's phone number into the platform, in which case our Terms of Service contractually require the host to represent and warrant that they already obtained that guest's prior express consent to be contacted by text message about the event before uploading it. Fancy RSVP does not purchase, rent, scrape, or otherwise acquire phone numbers from any third-party list, data broker, or lead-generation source.
No Sharing or Selling of Mobile Information: Fancy RSVP will NEVER share, sell, rent, license, trade, or otherwise disclose mobile phone numbers, SMS opt-in status, or any consent records collected through our text messaging program to any third party or affiliate for their own marketing or promotional purposes, under any circumstances. This prohibition applies regardless of any other provision of this Policy governing general data sharing, described in Section 4 below. The only parties who ever receive mobile number data are: (i) the specific event host who added or received the guest's number, solely to manage their own event, and (ii) our SMS delivery infrastructure provider (currently Twilio, Inc.), which processes the number strictly as a data processor to technically transmit the message on our behalf and is contractually prohibited from using it for any other purpose. Mobile opt-in data and consent records are never used for cross-context behavioral advertising, never used to build marketing lists, and never "sold" within the meaning of the CCPA/CPRA.
Message Frequency: Message frequency varies depending on the number and timing of events you are invited to or are hosting. A typical guest can expect approximately 1–5 messages per event (for example, one confirmation, one or two reminders, and a day-of message). Message and data rates may apply depending on your mobile carrier plan. Fancy RSVP is not responsible for any charges imposed by your wireless carrier.
Opt-Out (STOP) Rights: You may withdraw consent and stop receiving text messages from Fancy RSVP at any time by replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT to any message you receive from us. You will receive one final carrier-mandated confirmation message acknowledging the request. Your number is then placed on our suppression list and excluded from all future messaging across the platform, and no further messages will be sent to it unless you re-subscribe with a new opt-in (for example, by replying START). The associated event host can no longer reach that number through the platform and may contact you through another method you've provided, such as email.
Help and Support (HELP): Reply HELP to any text message you receive from us at any time, or contact our support team directly at info@fancyrsvp.com, and we will provide assistance or opt-out instructions.
Carrier Disclaimer: Wireless carriers are not liable for delayed or undelivered messages. Text messaging may not be available on all carriers or in all coverage areas. Supported carriers include, but are not limited to, AT&T, T-Mobile, Verizon Wireless, U.S. Cellular, and their respective affiliates and roaming partners, none of which are responsible for the content of messages sent through the platform.
Retention of Consent Records: We retain a timestamped record of each phone number's opt-in method, the consent language presented at the time, and its opt-out status for as long as required to demonstrate TCPA/CTIA compliance, and in any case for no less than four (4) years from the date consent was captured or withdrawn.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:
Service Providers: We work with trusted third-party companies that perform services on our behalf, including database and cloud infrastructure (Supabase and our server hosting provider), email delivery (Brevo), SMS delivery (Twilio), and payment processing (Stripe). These providers are contractually bound to protect your data and use it only as directed. As described in Section 3 above, our SMS delivery provider is contractually barred from using mobile numbers or consent records for its own marketing purposes.
With Your Consent: We may share your information when you explicitly authorize us to do so, such as when you choose to integrate with third-party applications or share event details publicly.
Event Guests: When guests RSVP to your event, they can see the event details you've published. Hosts can see guest responses and contact information as part of their event management.
Legal Requirements: We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your information. Mobile opt-in data specifically remains subject to the no-sale/no-share commitment in Section 3 regardless of any business transfer.
5. Data Security
We take the security of your data seriously and implement industry-standard measures to protect it:
Encryption: All data is encrypted in transit using TLS (1.2/1.3) and encrypted at rest by our database provider. Payment card details are handled entirely by Stripe and never touch our servers.
Access Controls: We enforce strict role-based access controls so that only authorized personnel can access your data, and administrative actions on the platform are logged for accountability.
Infrastructure: Our database and authentication layer are managed by Supabase, whose infrastructure is SOC 2 Type II certified, with automated backups. Our application servers enforce HTTPS with HSTS, hardened security headers, and layered rate limiting.
Vulnerability Management: We keep our software dependencies patched, apply security updates promptly, and review code changes for security impact before they are deployed.
Incident Response: In the event of a data breach that affects your personal information, we will notify you and relevant authorities within the timeframes required by applicable law.
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We encourage you to use strong, unique passwords and enable two-factor authentication on your account.
7. Your Rights (GDPR / CCPA)
Depending on your location, you may have the following rights regarding your personal data:
Right to Access: You can request a copy of the personal data we hold about you. We will provide this in a commonly used, machine-readable format within 30 days.
Right to Rectification: You can update or correct inaccurate personal data directly through your account settings, or by contacting our support team.
Right to Deletion: You can request the deletion of your personal data. We will comply unless we are required to retain it for legal or legitimate business purposes.
Right to Data Portability: You can export your event data, guest lists, and account information in standard formats (CSV, JSON) at any time from your dashboard.
Right to Object: You can object to the processing of your data for direct marketing purposes. You can also object to processing based on legitimate interests, subject to our evaluation.
Right to Restrict Processing: You can request that we limit how we use your data while we address a concern you've raised about its accuracy or our processing activities.
CCPA Specific Rights (California Residents): You have the right to know what personal information is collected, disclosed, or sold; the right to delete personal information; the right to opt-out of the sale of personal information (we do not sell your data); and the right to non-discrimination for exercising your rights.
To exercise any of these rights, email us at info@fancyrsvp.com or use the privacy controls in your account settings. We will respond within the legally required timeframe.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
Active Accounts: Your account data and event information are retained for the duration of your account's active status, plus a 30-day grace period after account closure.
Closed Accounts: Upon account deletion, we permanently erase your personal data within 90 days, except where retention is required by law (e.g., financial records for tax compliance, which are retained for 7 years).
Guest Data: Guest information associated with your events is deleted when you delete the event or close your account. Guests can also request their data be removed independently.
Backup Systems: Data may persist in encrypted backup systems for up to 30 additional days after deletion from primary systems, after which it is permanently purged.
Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and platform improvement purposes. This data cannot be used to identify any individual.
9. Children's Privacy
Fancy RSVP is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16 years of age.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@fancyrsvp.com. We will take prompt steps to delete such information from our systems.
In cases where a minor's information is included as a guest in an event (e.g., children attending a wedding), the event organizer is responsible for obtaining appropriate parental consent before adding that information to our platform.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:
Notification: We will notify you of material changes via email and/or a prominent notice on our platform at least 14 days before the changes take effect.
Review Period: You will have the opportunity to review the updated policy before it becomes effective. If you disagree with the changes, you may close your account before the effective date.
Version History: We maintain a version history of this policy. Previous versions are available upon request by contacting our privacy team.
Your continued use of our platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
11. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us through any of the following channels:
Legal Entity: Fancy RSVP is owned and operated by 16941460 Canada Corp., operating as Via Marketing.
Email: info@fancyrsvp.com
Corporate Email: info@viamarketing.ca
Mail: 16941460 Canada Corp. o/a Via Marketing, Attn: Privacy, 2488 Selord Court, Mississauga, Ontario L5J 1P7, Canada
Corporate Website: viamarketing.ca
Data Protection Officer: For GDPR-related inquiries, contact our DPO at info@fancyrsvp.com
We are committed to resolving any complaints about your privacy. If you feel we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
Related Documents
Please also review our Terms of Service which govern your use of the Fancy RSVP platform.