Privacy Policy

When you create an account, we collect your name, email address, and profile information provided through our authentication service (Clerk). When you create events, we store event details such as title, date, location, and description. For guests who RSVP, we collect the information the event organizer requests — typically name, email, and any custom questions set by the organizer. Guests do not need to create an Duhuze-RSVP account to respond.

We use your information to: • Provide, maintain, and improve the Duhuze-RSVP platform • Send transactional emails (invitations, RSVP confirmations, reminders) • Communicate with you about your account or events • Analyze usage patterns to improve the product We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We share your data only with service providers that help us operate the platform: • Clerk — authentication and user management • Neon — database hosting (PostgreSQL) • Resend — transactional email delivery • Vercel — application hosting and CDN Each provider is bound by their own privacy policies and data processing agreements. We do not share guest data with anyone other than the event organizer who invited them.

We retain your account data for as long as your account is active. Event and guest data is retained for as long as the organizer's account exists. If you delete your account, we remove your personal data within 30 days, except where required by law. Guest RSVP data is associated with the event organizer's account. Guests can request removal of their data by contacting the event organizer or by emailing us directly.

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party trackers. Our analytics are minimal and focused on aggregate usage patterns — we do not build individual user profiles for advertising.

We take reasonable measures to protect your data, including: • Encrypted connections (HTTPS/TLS) for all data in transit • Encrypted database storage at rest • Session tokens with automatic expiration • Role-based access controls for administrative functions No system is perfectly secure. If you discover a vulnerability, please contact us at security@duhuze.com.

You have the right to: • Access the personal data we hold about you • Correct inaccurate data • Request deletion of your data • Export your event and guest data • Withdraw consent for optional communications To exercise any of these rights, contact us at privacy@duhuze.com.

We may update this policy from time to time. When we make significant changes, we'll notify you by email or through a notice on the platform. Continued use of Duhuze-RSVP after changes constitutes acceptance of the updated policy.

If you have questions about this privacy policy or our data practices, contact us at: • Email: privacy@duhuze.com • General inquiries: sales@izyodigital.com