Interim information under review

Privacy information

This page describes how the service currently operates, but it is not the final legal wording. The legal entity, retention periods, and full policy remain under review.

Data the service needs

Account data such as name and email, with passwords stored as cryptographic hashes.
Event details and media uploaded by the invitation owner.
Guest responses and companion details requested by the invitation owner.
Invitation-open counts and approximate country, region, and city inferred from the connection. The invitation view record does not store the raw IP address or precise location.
Order and payment records, without storing full card details inside ondate.

Why it is used

To operate accounts, invitations, attendance response, order fulfillment, abuse prevention, support, and applicable legal obligations.

Advertising and guest data

Guest names, phone numbers, emails, and personal-link tokens must not be sent to advertising platforms. Guest reply measurement, when enabled, uses an event without this personal data.

Measurement preferences

Your current choice: not selected yet.

Choosing essential only reloads the page to stop any measurement tool already loaded in the current session.

Retention and deletion

The product design calls for unpaid preview files to be deleted after 72 hours and for account, privacy, and deletion controls. Verifying the automation and defining retention periods for the remaining data categories are still open readiness work.

Questions and requests

Email hello@ondate.app and never send passwords, card details, or sign-in codes.