Effective July 5, 2026
Privacy policy
LegitDiary Events helps hosts create private events, invite guests, and collect RSVPs. This policy explains the information used to provide that service and the choices available to hosts and guests.
Information we collect
- Host account details, including email address, display name, timezone, and authentication records.
- Event details supplied by a host, including schedule, location, description, cover image, and settings.
- Guest details supplied by a host, including name, email address, phone number when used, party limits, and communication preferences.
- RSVP details supplied by a guest, including response, party size, comments, and answers to host-created questions.
- Delivery and operational data, including message status, request identifiers, timestamps, browser information, and security events.
How information is collected and used
Information comes from hosts, guests, and the devices used to access the service. We use it to authenticate hosts, operate events, deliver invitations, process RSVPs, prevent abuse, provide support, diagnose failures, and meet legal obligations. We do not use guest details to build advertising profiles.
Disclosure and service providers
We disclose information only to the host and authorized event collaborators, to guests as needed for the event, to vendors that operate hosting, database, email, security, and monitoring services, or when required by law. Current infrastructure may include Vercel, Supabase, Resend, and Sentry. We do not sell personal information or share it for cross-context behavioral advertising.
Retention and deletion
Event data remains available until the host deletes the event or account, subject to backup and legal requirements. Account deletion has a seven-day cancellation period. Operational audit evidence and pseudonymous deletion records are retained for no more than 365 days. Provider delivery records and backups follow the provider retention settings configured for the service.
Your choices
Hosts can review event data, export guest information, and schedule account deletion from Settings. A guest may ask the event host to correct or remove RSVP information. You may also request access, correction, or deletion by emailing privacy@legitdiary.com. We may need to verify the request and may retain information where an exception applies. Exercising a privacy right will not result in discriminatory treatment.
Security and children
We use access controls, encryption, scoped credentials, monitoring, and tested deletion procedures. No system is completely secure. The service is not directed to children under 13, and hosts should not intentionally submit children's contact information without appropriate authority.
Changes and contact
We will update the effective date when this policy changes and give additional notice for material changes when appropriate. Questions may be sent to privacy@legitdiary.com.