Nimanto (“we”, “us”) provides digital invitations with RSVP collection at nimanto.com. This policy explains what personal data we process, why, and the choices you have. It applies to hosts who create invitations and to guests who open them.
What we collect
- Account data from hosts: name, e-mail address, optional phone number, and a password hash if you sign up with e-mail. If you sign in with Google we receive your name, e-mail address and profile picture from Google.
- Invitation content that hosts create: text, photos, music files and event details such as dates and venues.
- Guest lists that hosts add or import: guest names, e-mail addresses, phone numbers and group tags. Hosts are responsible for having permission to share this information with us.
- RSVP responses submitted by guests: name, attendance, number of guests, optional e-mail, phone, dietary notes and messages.
- Usage data: when an invitation is opened, server logs, and a hashed IP address on RSVP submissions used only to prevent abuse.
- Payments: card details are entered on Stripe and never reach our servers. We store the order amount, status and Stripe identifiers.
How we use it
- To provide the service: render invitations, deliver personal guest links, collect RSVPs and show hosts their responses.
- To send transactional e-mail such as invitations on a host’s behalf, collaborator invites and receipts.
- To keep the service secure, prevent spam and comply with legal obligations.
We do not sell personal data and we do not use guest data for advertising.
Who we share it with
We use service providers who process data on our behalf under contract: Hostinger (hosting), Neon (database), Google (sign-in), Stripe (payments) and Resend (e-mail delivery). Guests see only the invitation a host shares with them. Hosts and their collaborators see the guest list and RSVPs for their own events.
Retention
Invitation content, guest lists and RSVPs are kept for as long as the host’s account exists or until the host deletes the event. Deleting an event removes its guests and RSVPs. Deleting an account removes everything associated with it. Backups are purged on a rolling basis.
Your rights
You can access, correct, export or delete your data. Hosts can do this from the dashboard; guests can ask the host who invited them or contact us directly. Depending on where you live you may have additional rights under GDPR, the UK GDPR, India’s DPDP Act or US state laws, including the right to complain to a supervisory authority.
Cookies
We use a strictly necessary session cookie to keep hosts signed in and a security token to protect forms. We do not use advertising or cross-site tracking cookies.
Children
Accounts are for people aged 16 or over. Guests of any age may open an invitation, but we do not knowingly collect personal data from children beyond what a host enters.
Contact
Questions or requests: privacy@nimanto.com. We will update this policy when our practices change and show the date above.