Privacy Policy

1. Who is responsible for your data

Pigeon Invites is run by Tamarin Labs S.R.L. (“we”), Strada Fildeșului 4, Block B6, Entrance 1, Ground floor, Apt. 6, Sector 3, Bucharest, Romania, company number 39430577. For anything about your personal data, write to [email protected].

Whose decisions your data follows depends on who uses Pigeon Invites:

• Hosts’ accounts: we’re responsible (the “controller”).
• Guests of a private event (a wedding, a baptism, a birthday someone organises for themselves): we’re responsible for how Pigeon Invites stores and uses your data. The host decides whom to invite and what to ask.
• Guests and followers of a business or organisation (a venue, a company, an organiser, anyone on Business): that business is responsible, and we process your data on its behalf under our data processing terms. You can ask it, or us, about your data.

2. If you have an account (hosts)

What we keep:

• your name, email address, password (stored only as a secure hash), language and region;
• your events: titles, hosts’ names, dates, venue and address, messages, programme, questions, cover photo, logo and design, and the photos and videos that belong to them;
• your public page and brand (address, name, description, link, colours, fonts, logo), if you set them up;
• plan and billing: your plan, its status and dates, and your Stripe customer and subscription references. Stripe keeps your card, billing address and any VAT number;
• when you accepted our terms and which version, your notification settings and the notifications in your dashboard;
• if you signed up after following a “Made with Pigeon Invites” link, which link it was (for example the invitation it was on). This is carried in the link itself, not in a cookie;
• your emails to us.

Why, and on what legal basis:

• to provide Pigeon Invites and send you the emails it involves (RSVPs, summaries, reminders, warnings before data is deleted): to perform our contract with you;
• to take payments, issue invoices and keep accounting records: to perform the contract and meet our legal obligations;
• to keep Pigeon Invites secure, prevent abuse and handle reports and disputes: our legitimate interest in running a safe service;
• to see which invitations bring new hosts: our legitimate interest in understanding how Pigeon Invites grows, using only the link’s code.

We don’t send hosts newsletters or advertising. You can turn off email notifications under Account.

3. If you're invited (guests)

What the host gives us: your name, and if they add them, your email address, phone number, group and how many people your invitation is for.

What you give us when you answer:

• whether you’re coming, how many of you, and your companions’ names;
• your answers to the host’s questions, and your message to the host;
• dietary needs or allergies, if the host asks and you choose to tell them;
• on an open RSVP page: your name and email address;
• if the event has an album: the photos you add, and the name you add them under.

What Pigeon Invites records: when your invitation was sent, when you first opened it (link previews in chat apps don’t count), reminders, when you answered, and your place on a waitlist. The host can see whether you’ve opened your invitation.

Dietary needs can reveal something about your health (an allergy) or your beliefs (a religious diet). Telling the host is optional: by filling in the field you agree to share it with them, so they can plan the menu. Nobody else sees it, you can change it until the RSVP deadline, and it’s deleted 30 days after the event.

Why: to deliver your invitation and the emails that go with it (your receipt, reminders before the deadline, “see you tomorrow”, the invitation to share photos, the thank-you note, waitlist and cancellation news), to record your answer and show it to the host, and to run the album. For a private event, this rests on the host’s and our legitimate interest in organising the event you were invited to; for a business’s event, on that business’s legal basis.

Who sees what:

• the host sees everything you tell them, and when you opened the invitation;
• other guests and anyone with the album link see the photos you add and the name next to them, and the photos can show on the event’s TV screen. Your answers aren’t shown to other guests, only totals such as how many are coming or how many places are left.

You can change your answer until the deadline, ask the host to remove you from the guest list, or write to us. We don’t send guests anything that isn’t about the event they were invited to, unless they choose to follow a business.

4. If you follow a business

When you follow a venue or company, we keep your email address (after you confirm it) and/or your device’s notification subscription, your name if you give it, which events you follow, your answers to its teasers, and a record of your consent: when and where you gave it and the words you agreed to. We also note when you were last messaged, so that a business can’t send you more than two announcements or teasers a week.

The legal basis is your consent. You can withdraw it at any time with the link in every email (or the unsubscribe button your mail app shows) or from your follower page. When you stop following everything, we delete your follower record. The business is responsible for these messages, and we send them on its behalf.

5. Visiting Pigeon Invites

• Our servers keep technical logs (IP address, browser, the page asked for and when) to keep Pigeon Invites secure and fix problems. We keep them for no more than 30 days.
• When someone follows a “Made with Pigeon Invites” link, we count the click with the page it came from and the page it went to. Nothing that identifies the person is kept.
• There are no analytics, advertising or social media trackers on Pigeon Invites, and our fonts are served from our own servers. Google Maps and Google Calendar only come into play if you tap “Directions” or add an event to Google Calendar; Google’s privacy policy then applies.
• What we store on your device is listed in the Cookie notice.

6. Who we share data with

We never sell personal data or use it for advertising. We share it only with the companies that help us run Pigeon Invites, which may only use it to do so:

We may also share data with professional advisers (accountants, lawyers) who are bound to confidentiality, with authorities when the law requires it, and with a buyer if Pigeon Invites is ever sold, who would have to respect this policy.

7. Transfers outside Europe

We keep our data in the European Union. Where a provider handles it in another country (for example SendGrid and Stripe in the United States), the transfer is protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Write to [email protected] for a copy of the safeguards.

8. How long we keep data

Before photos, videos, a guest list or followers are deleted, the host gets an email at least a week ahead, so they can download them. Hosts can delete guests, photos and events sooner at any time.

When you delete your account, everything in it is deleted straight away, except invoices and payment records, which the law requires us to keep. Copies in our backups disappear as the backups are replaced.

9. Your rights

You can ask us to:

• give you a copy of your data, or send it to you in a format you can take elsewhere;
• correct it, or delete it;
• stop or limit using it, including when we rely on our legitimate interests;
• withdraw a consent you gave (this doesn’t affect what we did before).

Hosts can do most of this themselves in the dashboard: edit or export the guest list, delete guests, photos and events, or delete the account. Otherwise write to [email protected]. We answer within a month, and may ask you to confirm who you are. If your data belongs to a business’s event, we’ll pass your request on to that business or help it answer.

You can also complain to a data protection authority. In Romania, that’s the National Supervisory Authority for Personal Data Processing (ANSPDCP). Wherever you live, you can contact your own authority, for example the ICO in the UK, the Office of the Privacy Commissioner in Canada or New Zealand, the OAIC in Australia, or the Information Regulator in South Africa.

We don’t make decisions about people by automated means alone, and we don’t sell personal data or share it for advertising (as defined by US state privacy laws).

10. Security

• Pigeon Invites only works over encrypted connections (HTTPS). Passwords are stored as secure hashes, and sign-in tokens are kept where page scripts can’t read them.
• Invitation, album and follower links contain long random codes that can’t be guessed, and guessing short codes is slowed down.
• Photos are re-encoded when they’re added, which removes hidden details such as the location they were taken.
• Only the people who run Pigeon Invites can access its data, and only when they need to.

11. Children

Accounts are for adults (18 and over). Guests can be any age, since the host chooses whom to invite, and albums of birthdays and baptisms often include children. We ask guests to check with a parent before adding photos of children. A parent can ask the host, or us at [email protected], to remove a photo of their child.

12. Changes

When we change this policy, we update the date at the top. If a change matters to you, we’ll tell hosts by email before it applies.

13. Contact

Questions or requests about your data: [email protected].