Skip to content

Last updated: April 14, 2026

Privacy Policy

Your moment is yours. This policy explains what information rsvpbloom collects when you plan and run your event, and how we protect it.

1. Who we are

rsvpbloom ("we", "us") operates rsvpbloom.com and the associated event-planning services. We are the data controller for the personal information described in this policy.

2. What we collect

3. How we use it

4. Sharing

We never sell your data. We share it only with the sub-processors we need to run the service: Supabase (database & auth), Vercel (hosting), Paystack (payments), and email/SMS providers for notifications. Each is bound by a data-processing agreement.

5. Your rights

Under the Nigeria Data Protection Act (NDPA 2023), GDPR, and comparable laws, you can request access, correction, deletion, restriction, or export of your personal data. Email privacy@rsvpbloom.com and we'll respond within 30 days.

6. Retention

Event data is retained while your account is active and for up to 12 months after deletion for backup and legal compliance. Payment references are retained for 7 years as required by tax law.

7. Cookies

We use strictly necessary cookies for authentication and security, and analytics cookies only with your consent. No advertising cookies.

8. Changes

We'll post material changes here and email account holders 14 days before they take effect.

9. Contact

Privacy questions: privacy@rsvpbloom.com. General: hello@rsvpbloom.com.