Privacy Policy

1. Who we are

Eventorya is a digital invitation platform for weddings and private events, currently focused on the Maltese market. This policy explains what personal data we collect, why, and how it is protected when you use eventorya.com or an event page hosted on it.

2. Data we collect

We collect different data depending on how you interact with us:

• From event organizers (our clients): name, email address, and event details such as title, date, locations, invitation text, and the guest list you provide us with.
• From guests who receive a personalised invitation link: name, an optional email address or phone number, RSVP response (attending or not, number of adults and children), dietary requirements, an optional message to the hosts, and any gift-related preference you submit.
• From website visitorswho submit the "Request a quote" form: name, email address, event type, indicative date, and any message you include.

3. Who is responsible for guest data (controller vs. processor)

For quote requests and admin account data, Eventorya acts as the data controller: we decide why and how that data is used.

For guest data (names, RSVP answers, dietary requirements, messages), the event organizer is the data controller. They decide who to invite and what information to collect from their guests. Eventorya acts as their data processor, storing and displaying that data only to provide the invitation and RSVP service on the organizer's behalf. If you are a guest and want to know more about how your response is used, please contact the person who invited you; you are also welcome to contact us directly at admin@eventorya.com.

4. Why we use this data

• To create and display an event's invitation page.
• To collect and organise RSVP responses for the organizer.
• To respond to quote requests and follow up with prospective clients.
• To operate and secure the admin dashboard used by organizers.
• To send service-related communications (e.g. about an event or an inquiry).

We process this data on the basis of performing a contract (or taking steps to enter one, for quote requests) and our legitimate interest in keeping the service secure and functioning correctly.

5. Where your data is stored

Event, guest, and RSVP data is stored in Supabase, hosted in the Frankfurt (EU) region. The website itself is hosted on Vercel. We do not sell personal data to third parties. If an organizer adds a Google Maps embed to their event location, loading that map may involve Google as an independent third party — see our Cookie Policy for details.

6. How we protect your data

• Guest invitation links use long, randomly generated tokens that cannot be guessed — there is no public listing of guests or events.
• Our database uses Row Level Security so that guest and RSVP data cannot be read or written directly without going through controlled, validated functions.
• The admin dashboard is protected by authentication; only authorised organizers and staff can access event management tools.
• Data in transit is encrypted via HTTPS.

7. How long we keep your data

Event and guest data is generally kept for up to 12 months after the event date, after which it is eligible for deletion unless the organizer requests otherwise (earlier deletion or a longer retention period). Quote request data is kept for up to 12 months if it does not result in a booked event. Admin account data is kept for as long as the account remains active. You, or the event organizer on your behalf, can request earlier deletion at any time.

8. Your rights under GDPR

If you are in the EU/EEA, you have the right to access, correct, delete, restrict, or receive a copy of your personal data (data portability), and to object to certain processing. To exercise these rights, write to admin@eventorya.com. If your request concerns data submitted as a guest to someone else's event, we may direct you to the event organizer first, since they control that data, but we will always help facilitate the request.

9. Cookies

Eventorya only uses strictly necessary cookies. Details are available in our Cookie Policy.

10. Changes to this policy

We may update this policy as the service evolves. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Questions about this policy or your data can be sent to admin@eventorya.com.