Privacy Policy

Last updated July 10, 2026

Function is an event invite and RSVP service. This page explains what we collect, why we collect it, and who can see it, in plain language.

What we collect

If you host events (you have an account):

• Your email address and a password (passwords are stored hashed by our auth provider).
• The events you create: titles, dates, locations, images you upload, and settings.
• An optional public profile (handle and display name) if you create one.

If you RSVP to an event (no account needed):

• The name you enter, your response (going / maybe / can't), and any +1 names.
• Answers to questions the host added, and an optional note.
• Your email or phone number, only when the host turns that on and you choose to provide it.
• Check-in status if the host scans your ticket or checks you in at the door.

If you post to an event page:

• Photos, comments, and song requests you submit, with the name you attach to them.

Automatically:

• Basic view counts for invite pages, including which share method a visit came through (for example a QR code or a text link). We do not run third-party ad trackers or analytics scripts.
• Technical logs kept by our hosting providers (like IP addresses in standard server logs) used for security and rate limiting.

How we use it

• To run the service: show invites, track RSVPs, issue tickets, run the door.
• To show hosts their own guest lists and event analytics.
• To protect the service from abuse (rate limiting, spam prevention).

We do not sell your information. We do not share it with advertisers.

Who can see what

• Event pages are visible to anyone with the link, unless the host adds an access code. What appears on the page (guest first names, photo walls, comment walls) is controlled by the host's settings.
• Guest lists are private to the host and their co-hosts. Contact info you provide with an RSVP is visible to them, not to other guests.
• Door staff with a PIN link can see the guest list for that event and check people in. They cannot see contact details pages or edit the event.
• Hosts can export their own guest list. What hosts do with it is their responsibility; we ask them to respect their guests.

Cookies

We use cookies to keep hosts signed in and to keep door-staff sessions working. Your browser also stores a small record of your own RSVPs locally so you can change them later. We don't set advertising cookies. If a host shows a map on their invite, that map comes from Google and may set Google's own cookies (see Maps below).

Where your data lives

Data is stored with our infrastructure providers (Supabase for the database and uploads, Netlify for hosting). They store it on servers in the United States.

Maps

When an invite shows a map, we embed it from Google Maps. Loading that map sends a request from your device to Google, including your IP address, and Google may set its own cookies. That interaction is governed by Google's Privacy Policy. A map never loads on an event whose exact address is still hidden.

Deleting your data

• Hosts can delete any event, which removes its RSVPs, photos, comments, and song requests.
• Hosts can delete their whole account from the Account page.
• Guests can cancel an RSVP from the invite page on the device they used, or ask the host to remove them.
• For anything else, email us and we'll help: avallairebusiness@gmail.com.

Your rights

You can ask us to access, correct, or delete the personal information we hold about you, and we'll honor reasonable requests. You can do much of this yourself: hosts can edit or delete their events, and change their password or delete their account from the Account page; guests can change or cancel an RSVP from the device they used. For anything else, email us at avallairebusiness@gmail.com.

How long we keep it

We keep your information for as long as your account or event needs it. When you delete an event or your account, we remove its data (RSVPs, photos, comments, and song requests) from our systems. Standard server logs kept for security are rotated on a short schedule by our hosting providers, and backups may retain deleted data for a short period before they cycle out.

Children

Function is not directed at children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update this page and the date at the top. Significant changes will be called out on the site.

Questions? avallairebusiness@gmail.com