Privacy policy
Who we are
GuestlistX is run by [COMPANY NAME, ADDRESS, COMPANY ID]. Contact: [email protected].
What we store
- Venue staff accounts: name, email, group and settings, so people can sign in and do their job.
- Guest lists: guest names, notes, who invited them and when they were confirmed and checked in. Names, notes and chat messages are encrypted before they are stored.
- This website: what you enter when you start a free trial (venue, name, email, time zone) and your IP address, to set up your venue and prevent abuse.
Who is responsible for guest data
Each venue decides whose names go on its lists and is the controller of that data. We process it on the venue’s behalf under our data processing agreement.
Where it is stored
On Google Cloud (Firebase) in Frankfurt, Germany. Push notifications go through Apple. [Payment provider, once chosen.]
How long we keep it
Guest records are deleted automatically after [12] months by default. The venue can choose a shorter period, or a longer one on the Group plan (up to 24 months). Deleting a venue deletes all of its data. Trial requests that never become a venue are deleted after [90] days.
Your rights
You can ask to see, correct, export or delete your data, and complain to your data protection authority (in the Czech Republic: ÚOOÚ). If you were a guest on a venue’s list, contact that venue first; we will help them answer you.