Privacy Policy

1. Introduction

CardViva (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use cardviva.com (“the Service”).

2. Information We Collect

Information you provide:

• Account details (name, email address, password)
• Event information (event title, date, time, location)
• Guest lists (names, email addresses, phone numbers)
• Floor plans and custom images you upload
• RSVP responses, meal selections, and dietary restrictions
• Gift and payment information (processed by Stripe)

Information collected automatically:

• IP address and browser type
• Pages visited and time spent on the Service
• Device information (screen size, operating system)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Send event invitations and RSVP notifications on your behalf
• Process gift payments through Stripe
• Send you account-related communications (password resets, billing notices)
• Analyze usage to improve performance and features

We do not sell your personal information to third parties. We do not use your data for advertising.

4. Data Sharing

We share your information only in these limited circumstances:

• Stripe: Payment and gift transaction data is shared with Stripe for processing.
• Resend: Email addresses are shared with our email provider (Resend) to deliver invitations and notifications.
• Supabase: Your data is stored securely on Supabase (our database and storage provider).
• Legal requirements: We may disclose information if required by law or to protect our rights.

5. Guest Data

Event hosts upload guest information (names, emails, phone numbers) to send invitations and manage RSVPs. Guest data is only used to provide the Service for that specific event. Guests can view and update their own RSVP information through their unique RSVP link. We do not use guest data for marketing or share it with anyone other than the event host.

6. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure database access with row-level security policies, and encrypted password storage. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and event data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes.

8. Cookies

We use cookies to keep you signed in and to improve your experience. When you first visit our site, a cookie consent banner lets you choose which categories of cookies to allow. You can change your preferences at any time using the “Cookie Settings” link in the footer.

We use the following categories of cookies:

We do not use third-party advertising cookies. Analytics and marketing cookies are off by default and only activated with your explicit consent.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing at any time

To exercise any of these rights, contact us at support@cardviva.com.

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at support@cardviva.com.