Privacy Notice — Eventovias

1. Who we are

Eventovias is operated by AW, obrt za trgovinu i usluge ("we", "us"). We are the data controller for personal data we process about you when you use our website and digital wedding stationery service (the "Service").

2. What data we collect

Account data — your email address, display name, password (hashed) and avatar.
Design content — the text, photos, music links, RSVP questions and other content you add to your designs.
RSVP data — when guests respond to your invitation, we store the guest name, optional email, attendance and any answers they provide. This data is available to you, the design owner.
Usage data — log information such as IP address, device and browser type, pages visited, and timestamps. We use this for security and product improvement.
Support communications — messages you send us when contacting support.

Payment information (card details, billing address) is collected directly by our payment provider, Paddle, and is never stored on our servers.

3. Why we use your data

To create and operate your account (legal basis: contract performance).
To provide the editor, host your designs and deliver RSVP collection (contract).
To process payments and provide receipts via Paddle (contract).
To keep the Service secure and prevent fraud (legitimate interests).
To respond to your support requests (legitimate interests).
To improve the Service (legitimate interests).
To comply with legal obligations such as tax and accounting (legal obligation).

4. Who we share data with

Paddle — our Merchant of Record, who processes all payments, handles refunds, invoicing and tax compliance.
Hosting and infrastructure providers who host the Service, including our database, file storage and edge functions.
Email and analytics providers we use to operate and improve the Service.
Professional advisers (legal, accounting) where necessary.
Authorities where we are required to do so by law.

We do not sell your personal data, and we do not share guest RSVP data with anyone other than the owner of the design those guests responded to.

5. International transfers

Some of our service providers are located outside your country, including in the United Kingdom, the European Economic Area and the United States. Where data is transferred outside your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. How long we keep your data

We keep your account and design data for as long as your account is active. If you delete your account or a design, we will delete or anonymise the related personal data within a reasonable period, except where we are required to retain it for legal reasons (for example, financial records).

7. Your rights

Depending on your jurisdiction, you have rights to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. You can exercise most of these rights directly from your account, or by contacting us. You also have the right to lodge a complaint with your local data protection authority.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and regular security reviews. No system is completely secure, but we work hard to keep your information safe.

9. Cookies

We use a small number of essential cookies and similar technologies needed to keep you signed in and to keep the Service secure. We do not use advertising cookies. If we add analytics or marketing cookies in the future, we will update this notice and, where required, ask for your consent.

10. Changes

We may update this Privacy Notice from time to time. The "Last updated" date at the top of this page tells you when it was last revised.

11. Contact

If you have any questions about this Privacy Notice or how we handle your personal data, please contact us through the support options on our website.