Privacy Policy

1. Who is responsible for your information

AKSIRO PDOO, trading as SimplyVite ("SimplyVite", "we", "us", or "our"), is responsible for the personal information described in this policy.

This policy applies to account holders, event hosts, purchasers, invitation guests, RSVP respondents, event-email subscribers, guest-photo contributors, and people who contact us.

Event hosts decide what event content to publish, which guest questions to ask, and who receives their links. A host is responsible for having a lawful basis or permission to provide information about other people. SimplyVite remains responsible for how its own Service receives, secures, uses, and shares personal information. The exact controller or processor roles may depend on the context and applicable law.

2. Information we collect

Account and support information. We may collect an account email address, display name, authentication records, email-verification status, support messages, and information needed to secure or recover an account.

Event and invitation information. Hosts may provide event names, dates, times, time zones, venues, map links, invitation wording, RSVP deadlines, guest questions, design choices, public links, optional invitation-PIN settings, cancellation status, and other invitation content.

RSVP and guest information. Guests may provide names, attendance choices, party size, optional messages, answers to host-created questions, and submission timestamps. A host can view responses for that host's event.

Event-email information. Guests who choose event updates provide an email address. We process subscription and unsubscribe status, delivery status, and events such as delivery, bounce, complaint, suppression, or failure. We may keep a suppression record so that an address that has unsubscribed, complained, or repeatedly failed is not contacted improperly.

Guest photos. Guests may upload photographs to an event's shared gallery. We process the original image, generated display and thumbnail copies, file type and size, upload time, and technical identifiers used to enforce upload limits and detect duplicate or abusive activity.

SimplyVite uses privacy-preserving hashes for certain device, session, or network rate-limit identifiers rather than intentionally storing the raw identifier in its application database. Hosting and security providers may still process IP addresses and request logs as part of operating their infrastructure.

Purchase information. We receive transaction status, amount, currency, purchaser email, Stripe Checkout identifiers, and references needed to activate and support a purchase. Stripe receives payment-card and billing information directly. SimplyVite does not store full payment-card details.

Technical information. We and our hosting, security, and infrastructure providers may process IP address, device and browser information, timestamps, request logs, error reports, authentication events, and security signals needed to provide and protect the Service.

Information from third-party links. A host may add a Google Maps link or external photographer-gallery link, or a guest may choose a Google Calendar link. The SimplyVite website may display or link to YouTube, Instagram, Google, or another third party. Those services receive information according to their own privacy policies when you interact with them.

3. How we use information

We use personal information to:

• create, authenticate, secure, and support accounts;
• create, publish, display, update, cancel, and delete invitations;
• accept and show RSVPs and guest answers to the relevant host;
• operate guest-photo galleries and enforce upload limits;
• manage event-email subscriptions, deliver event updates, process unsubscribes, and prevent unwanted or undeliverable email;
• process purchases, activate paid invitations, prevent fraud, and maintain financial records;
• diagnose errors, protect the Service, enforce our Terms, and prevent abuse;
• respond to support and data-rights requests;
• comply with legal obligations and resolve disputes; and
• improve reliability and usability using operational information.

SimplyVite does not currently use advertising trackers or non-essential analytics cookies in the application, and we do not sell or rent personal information. If this changes, this policy and any required consent controls must be updated before the new use begins.

4. Legal bases

Depending on the person and the use, we rely on one or more of the following:

• Contract, to provide an account, purchased invitation, RSVP function, or requested Service;
• Consent, including when a guest subscribes to event emails or where consent is otherwise required;
• Legitimate interests, including securing the Service, preventing fraud, providing support, keeping necessary operational records, and improving reliability, balanced against the rights of affected people;
• Legal obligation, including tax, accounting, consumer, law-enforcement, and data-protection requirements; and
• Legal claims, when information is needed to establish, exercise, or defend a claim.

You may withdraw consent at any time. Withdrawal does not make earlier lawful processing unlawful. Some necessary features cannot operate without the information they require.

5. When we share information

We share only what is reasonably needed with:

• Stripe, to process payments, prevent payment fraud, and manage transaction records;
• Supabase, for authentication, database services, and private file storage;
• Vercel, for application hosting, delivery, logs, and operational security;
• Resend, for account, verification, and subscribed event-email delivery and delivery-event processing;
• event hosts, who receive RSVPs, guest answers, subscriber summaries, and guest photos for their own event;
• invitation guests, who may see public invitation content and photos in a shared event gallery;
• professional advisers and authorities, where reasonably needed for legal, accounting, security, or compliance purposes; and
• a buyer or successor, if the business is reorganized, sold, or transferred, subject to appropriate confidentiality and notice requirements.

We may also disclose information where required by law, to protect a person from harm, to investigate fraud or abuse, or to protect our legal rights.

Event hosts and guests should understand that invitation, gallery, and QR-code links are designed to be shared. An invitation PIN protects the public invitation only. It does not protect the separate guest-photo gallery link.

6. International transfers

Some service providers may process information outside Macedonia or the country where you live, including in the European Economic Area or the United States. Where required, we use provider contracts, recognized transfer mechanisms, and other safeguards intended to protect personal information during an international transfer.

7. Retention

We keep personal information only for as long as reasonably needed for the purposes described here, including providing the Service, supporting an active event, resolving disputes, preventing abuse, and meeting legal, tax, accounting, and security duties.

Specific rules include:

• Guest-photo access and retention: photos are kept while needed to provide the event's shared gallery and afterward only as reasonably needed for storage administration, security, support, or legal obligations. Stored photos are deleted when the host deletes the photos or event, when a valid deletion request is completed, or through SimplyVite's storage-cleanup procedures.
• Deleted photos and events: a host's deletion action removes the targeted active records and associated active photo objects. Limited provider backups or security records may remain until they expire under the relevant backup lifecycle.
• Email suppression: unsubscribe, complaint, bounce, or suppression records may be retained as needed to honor the person's choice and prevent improper future delivery.
• Payment and legal records: transaction references and records required for tax, accounting, fraud prevention, dispute, or legal purposes may be kept for the period required by law, even after an account is deleted.
• Account and event information: kept while the account or event is active and afterward only as reasonably needed for support, security, legal obligations, or a pending dispute.

8. Security

We use reasonable technical and organizational safeguards appropriate to the Service. These include encrypted network connections, access controls, private photo storage, time-limited signed photo links, payment processing by Stripe, email webhook verification, and rate limits intended to reduce abuse.

No internet or storage system can be guaranteed completely secure. Hosts should protect their accounts, public links, gallery links, QR codes, and invitation PINs, and should contact us promptly about suspected misuse.

9. Cookies and local device storage

SimplyVite uses cookies or browser storage that are necessary for authentication, security, invitation access, saved device state, and application operation. The application does not currently use non-essential advertising cookies or third-party behavioral analytics.

Third-party websites opened from SimplyVite may use their own cookies. If we later add non-essential analytics, advertising, or tracking, we will update this policy and introduce consent controls where required.

10. Your rights

Depending on applicable law, you may have the right to:

• ask for access to personal information we hold about you;
• correct inaccurate or incomplete information;
• request deletion;
• restrict or object to certain processing;
• withdraw consent;
• receive certain information in a structured, commonly used, machine-readable format;
• complain to a competent data-protection authority; and
• receive information about applicable international-transfer safeguards.

These rights can have legal exceptions. For example, we may retain a limited transaction record where tax law requires it, or decline to disclose information that would expose another person's rights.

There is currently no self-service complete account export or account-deletion button. To make a request, email info@axiro.cc from the email associated with your account where possible, use the subject "SimplyVite data request", and state whether you want access, export, correction, restriction, or deletion. A guest should include the relevant event link and enough detail to locate the RSVP, subscription, or photo.

We will verify identity before releasing or deleting information. We will never ask for your password or full payment-card number. We aim to respond within the period required by applicable law. Where the GDPR applies, this is generally within one month, subject to permitted extensions for complex requests.

Event-email subscribers can also unsubscribe using the link in an email. Hosts can delete individual guest photos and permanently delete their own events through the Service.

11. Children

SimplyVite accounts and purchases are intended for adults aged 18 or older. The Service is not directed to children.

Wedding or event information and photos can nevertheless include children. Hosts and uploaders must not submit a child's personal information or image unless they have the authority and any parental or guardian permission required by law. A parent, guardian, or affected person can contact us to request review or removal.

12. Changes to this policy

We may update this policy when the Service, providers, or legal obligations change. We will post the new date and provide additional notice where a material change or applicable law requires it.

13. Contact and complaints

For privacy questions or requests:

You may also complain to the data-protection authority that applies to you. We encourage you to contact us first so we can try to address the concern.