Privacy policy

Introduction

The site barmitzvah-invite.fr (hereinafter "the Service") is committed to protecting the privacy of its users' personal information. This privacy policy explains how we collect, use, and protect your personal data. By using our site or services, you accept the practices described in this policy.

Data collected

We collect the following types of information:

• Account data: name, first name, email address, password (encrypted)
• Event data: child's first name, celebration date, child's photo, ceremony details (locations, times)
• Guest attendance data: last name, email address, phone (optional), number of adults and children, dietary notes
• Payment data: processed directly by Lemon Squeezy — we do not store your banking information
• Navigation data: IP address (for rate limiting), pages visited (anonymous analytics via PostHog)

Purposes of processing

Your personal data is used to:

• Provide the invitation site creation and hosting service
• Manage RSVPs and related notifications
• Send transactional emails (welcome, publication, attendance notifications)
• Improve the service through anonymous usage statistics
• Comply with our legal and regulatory obligations

Legal basis for processing

• Performance of the contract: to provide the service (site creation, RSVP management)
• Your consent: for collecting guest attendance data
• Our legitimate interest: to improve the service and ensure its security
• Compliance with legal obligations: for accounting and tax purposes

Data retention

We retain your personal data for the following periods:

• Account data: until the account is deleted or 3 years after the last login
• Event data and RSVPs: for as long as the account is active, deleted along with the account
• Billing data: 10 years, in accordance with accounting obligations
• Navigation data: 12 months maximum

Data sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data may only be shared with the following technical subprocessors, strictly for the purpose of providing the service:

• Supabase Inc. (database and authentication) — hosted in Europe
• Hostinger International Ltd (site hosting)
• Lemon Squeezy (payment processing)

Data security

We implement appropriate technical and organizational measures to protect your personal data: password encryption, HTTPS communications, Row Level Security on the database, rate limiting on RSVP form submissions. Photos are stored securely with MIME type validation and a size limit (5 MB).

Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct or update your data
• Right to erasure: request deletion of your data
• Right to restriction: restrict the processing of your data
• Right to portability: retrieve your data in a structured format (CSV export available)
• Right to object: object to the processing of your data

To exercise these rights, contact us at: hello@barmitzvah-invite.fr

Cookies

Our site only uses technical cookies necessary for authentication and the proper functioning of the service (Supabase session). We use PostHog, a privacy-respecting audience analytics tool (hosted in the EU), which does not set advertising cookies or perform cross-site tracking.

Changes to this policy

This privacy policy may be updated periodically. In the event of a significant change, we will inform you by email or via a notification on the site. The last update date is shown at the top of this page.

Contact

For any questions about this privacy policy or the processing of your personal data, contact us:

Email: hello@barmitzvah-invite.fr