Privacy Policy

Last Updated: September 2026

1. Overview and Data Roles (Controller vs. Processor)

This Privacy Policy describes how Veventii LLC ("Company", "we", "us", or "our"), a limited liability company organized and existing under the laws of the State of Wyoming, United States, with its registered office located at 312 W 2nd St Ste A3759, Casper, WY 82601, USA, collects, uses, stores, and protects personal information when you access or use https://rsvp.now and related applications, services, and APIs (collectively, the "Services").

Event Host vs. Attendee Roles

Because RSVP.now processes guest lists and RSVPs on behalf of event hosts, our legal role depends on how you interact with the Platform:

Event Host (Organizer)Data Controller

When an event host creates an event, builds intake forms, imports guest lists, or collects attendee RSVPs, the Event Host is the legal Data Controller (or "Business" under CCPA/CPRA). The host determines what attendee information is collected, how it is used, and how long it is retained.

Veventii LLC (RSVP.now)Data Processor

Veventii LLC acts strictly as a Data Processor (or "Service Provider" under CCPA/CPRA) for guest data and RSVP responses. We process attendee information solely on behalf of and according to the instructions of the Event Host to provide ticketing, QR passes, confirmations, and check-in services. We do not sell or monetize guest lists.

For Attendees: If you RSVP to an event and wish to access, correct, or delete your registration data, please submit your request directly to the Event Host. Veventii LLC will assist Event Hosts in fulfilling verified data subject requests in accordance with applicable privacy laws.

2. Information We Collect

We collect information to provide, operate, and enhance our event registration platform:

  • Account and Authentication Data: When you sign in via Google OAuth or create an account, we collect your name, email address, profile photo URL, and unique identifier.
  • Event Registration Data: When you RSVP for events, we collect the responses you submit, including contact information, dietary restrictions, attendance tiers, and custom form answers requested by event organizers.
  • Payment & Billing Information: For credit purchases or paid ticket sales, payment processing is handled directly by Stripe. We do not store raw credit card numbers on our servers. We receive and retain tokenized customer IDs, transaction amounts, Stripe checkout session IDs, and invoice records.
  • Organization and Event Management Data: For organizers, we store event descriptions, schedule details, custom registration form schemas, co-manager assignments, and notification settings.
  • Technical and Usage Data: We automatically log device information, IP addresses, browser types, referral URLs, interaction timestamps, and telemetry required for security and uptime monitoring.

3. Cookies & Tracking Technologies

RSVP.now utilizes first-party and third-party cookies, browser localStorage, and telemetry beacons to guarantee platform security, preserve user sessions, and analyze site usage:

Essential Session & AuthenticationStrictly Necessary

First-party session tokens, authentication state, and CSRF nonces required to log in securely, navigate organizer dashboards, and process event intake without losing data.

Lifespan: Session duration to 30 days (for "Remember Me" sessions).

Security & Bot Defense (Cloudflare)Strictly Necessary

Cookies (including __cf_bm and cf_clearance) set by Cloudflare to distinguish genuine human users from automated malicious bot traffic, prevent DDoS disruptions, and record security challenge passes.

Lifespan: 30 minutes (__cf_bm) to 1 year (cf_clearance).

Functional & UI PreferencesFunctional

Browser localStorage variables (such as rsvp-theme and rsvp_cookie_consent) used exclusively to remember your selected dark/light color scheme and cookie preference locally on your device without server tracking.

Lifespan: Persistent on local device until cleared.

Analytics & Performance (Google)Analytics

Google Analytics 4 (Measurement ID G-5867F56MKS) cookies (_ga, _ga_*) to collect anonymized visitor volume, bounce rates, and navigation telemetry to evaluate platform stability and speed.

Lifespan: Up to 2 years. Controlled via our on-site Cookie Consent banner.

You can control or revoke your analytics consent at any time through our on-site banner or by installing the Google Analytics Opt-out Browser Add-on. Note that disabling strictly necessary authentication or Cloudflare security cookies will prevent you from signing in or completing ticket purchases.

4. How We Use Your Information

We use the collected information for the following purposes:

  • To provide, operate, and maintain the RSVP.now platform and event registration pipelines.
  • To generate attendee confirmations, calendar invites (.ics), and verified digital QR ticket passes.
  • To allow event organizers to manage attendee lists, check-ins, guest approvals, and communications.
  • To facilitate paid ticket checkout and process organizer credit purchases via Stripe.
  • To detect, prevent, and remediate technical errors, abuse, bot spam, and fraudulent activity.
  • To comply with applicable legal, financial, and tax accounting obligations.

5. Sub-processors & Infrastructure Partners

Veventii LLC engages selected third-party service providers ("Sub-processors") to assist in providing core platform infrastructure, hosting, payment operations, and transactional messaging. All sub-processors are bound by strict data processing and confidentiality agreements:

Cloudflare, Inc.

DNS management, Edge compute, CDN caching, and DDoS mitigation.

United States / Global
Google Cloud Platform (GCP)

Cloud database (Firestore), application backend compute, and OAuth identity.

United States
Stripe, Inc.

Payment processing, Stripe Connect organizer onboarding, and fraud protection.

United States / Global
Transactional Email & Telephony Relays

Transmission of digital ticket passes, calendar invitations, and organizer alerts.

United States

6. Information Sharing & "Do Not Sell" Declaration

We do not sell, rent, lease, or trade your personal information. We do not share personal information with third parties for cross-context behavioral advertising or third-party marketing purposes.

We only disclose information in the following limited circumstances:

  • With Event Organizers: When you submit an RSVP or purchase a ticket, your submitted registration data is transmitted directly to the designated organizers of that event.
  • With Authorized Sub-processors: Solely to deliver hosting, database storage, email dispatch, and payment processing as detailed in Section 5.
  • Legal & Regulatory Compliance: When required by lawful subpoena, court order, or applicable law to protect life, property, or legal rights.

7. Data Storage, Security, and International Transfers

Veventii LLC is a United States company headquartered in Wyoming (with registered office at 312 W 2nd St Ste A3759, Casper, WY 82601, USA). Our primary servers, databases, and third-party service providers are situated in the United States and other global cloud regions.

By accessing or using our Services, you understand and acknowledge that your personal information may be transferred to, stored, and processed in the United States and other jurisdictions that may have different data protection laws than your country of residence. We implement technical and organizational security measures, including encryption in transit (TLS 1.3), database encryption at rest, and strict least-privilege administrative access controls.

8. Financial & Data Record Retention Schedule

Veventii LLC retains personal information only for the duration necessary to satisfy the purposes for which it was collected, enforce contractual agreements, and adhere to statutory retention mandates:

  • Financial & Ticket Transaction Records: In accordance with United States Internal Revenue Code (IRS) and State of Wyoming statutory corporate recordkeeping mandates, all credit card payment records, credit top-up invoices, and platform commission ledgers are retained for a minimum of seven (7) years following transaction completion.
  • Server Security & API Logs: Access logs, IP records, and security telemetry are retained for one (1) year for fraud investigation, security audits, and abuse mitigation before automatic purging.
  • Attendee Event Registration Responses: Retained for the active lifecycle of the organizer's account, or until formally deleted by the organizer or requested by the attendee.

9. Your Privacy Rights & Data Protection Inquiries

Under applicable data protection laws (including GDPR, UK GDPR, and the California Consumer Privacy Act / CCPA as amended by the CPRA), you have rights regarding your personal information, including the right to request access, correction, deletion, restriction of processing, and data portability.

Because Veventii LLC acts as a processor for attendee event responses, requests to delete or modify responses submitted to specific third-party events should be directed primarily to the event organizer. For all account-level data, privacy inquiries, or regulatory escalations, you may contact our Data Protection representative.

Veventii LLC commits to acknowledging and substantive response to all verified data subject rights requests within thirty (30) calendar days.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect modifications in our services, regulatory requirements, or corporate practices. We will notify users by revising the "Last Updated" date at the top of this page.

11. Contact Us & Privacy Escalation

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

Veventii LLC

312 W 2nd St Ste A3759, Casper, WY 82601, USA

Privacy, DPO & Legal Rights Inquiries: legal@rsvp.now

General Support & Customer Service: support@rsvp.now