Privacy

How data is processed in this project

This policy summarizes which data is processed in the public RSVP flow, in the private panel, and in the technical operation of the site.

Back to home

Data protection roles

  • Arely y Jorge Oscar generally acts as controller for guest and RSVP data.
  • Maped Solutions processes that data on behalf of the controller to host, protect, and operate the platform.
  • Maped Solutions acts as an independent controller for authentication, security, technical logs, abuse prevention, and infrastructure operation.

Invitation and RSVP data

  • Invited group name.
  • Assigned guest count.
  • RSVP status.
  • Confirmed attendance count.
  • Declined attendance count.
  • Public reference and technical access token.
  • Optional guest message and dietary-note fields are not currently enabled in the base legal configuration.

Purposes and legal basis

Guest data is used to manage invitations, display the invitation linked to the received token, and collect RSVP responses for event organization.

The event controller will normally rely on Art. 6(1)(f) GDPR, to the extent the processing is necessary for organizing the event of Arely y Jorge Oscar.

Where Maped Solutions processes that data on behalf of the controller, this takes place under the corresponding data processing arrangement.

Private access and security data

  • Email address.
  • Password and access credentials.
  • Authentication and session identifiers.
  • Access role and status.
  • Technical session and CSRF security data.

Legal basis of the technical operator

  • Art. 6(1)(b) GDPR to provide the requested private access to the couple.
  • Art. 6(1)(f) GDPR for security, abuse prevention, service continuity, and infrastructure protection.

Technical providers

  • Frontend hosting: Vercel
  • Backend hosting: Render
  • Database: MongoDB Atlas
  • File storage: Cloudflare R2
  • Transactional email: SendGrid

Retention

  • Invitations and RSVPs: Until event closure plus configured retention window.
  • Private accounts: While private access remains active.
  • Technical and security logs: For the configured technical security retention window.
  • Residual backups: Until backup rotation expires.

Rights and contact

Requests relating to guest and RSVP data should primarily be directed to Arely y Jorge Oscar.

Requests relating to authentication, security, or technical operation may be directed to the technical operator.

Technical operator contact: contact@mapedsolutions.com

Event controller contact: jorgeamaroh@gmail.com