Privacy Policy
Your event data deserves care.
This starter policy explains what Reunela collects, why it is collected, and how organizers can ask for help with their data. It should be reviewed by qualified counsel before broad paid marketing.
Last updated: September 9, 2026
Information we collect
We collect account information such as your name, email address, authentication details, and workspace activity.
We collect event information that you choose to enter, including event names, dates, venues, cities, welcome messages, design choices, uploaded photos, guest names, table assignments, room or area labels, and optional meal or dietary notes.
Guests who use a public event page can search for their own name. We may process limited technical information, such as request timing, device/browser details, and rate-limit signals, to keep lookup private and reliable.
Payments are processed by Stripe. Reunela does not store full card numbers. We store limited payment references, dates, and plan status so we can unlock the correct event and support refunds or accounting questions.
How we use information
We use organizer and event information to create accounts, host event pages, import guest lists, publish QR-enabled pages, process upgrades, provide support, prevent abuse, and maintain product security.
We use guest information only to provide the seating lookup experience for the organizer’s event. We do not sell guest lists or use guest names for advertising.
Service providers
We rely on trusted providers to operate the service, including Supabase for authentication/database services, Vercel for hosting and deployment, and Stripe for payment processing.
When you create or change a password, we check it against Have I Been Pwned’s known breached-password list. We send only the first five characters of a password hash for this check, never the password or its full hash.
These providers process information only as needed to provide their services to Reunela and are subject to their own security and privacy commitments.
Cookies and analytics
We use only strictly-necessary cookies to keep you signed in, plus cookieless analytics (Vercel Web Analytics) that set no tracking cookies and do not follow you across sites. We do not use advertising or cross-site tracking cookies.
For the full breakdown, see our Cookie Policy at /cookies.
Retention and deletion
Public guest lookup closes 30 days after an event. Events, uploaded images, guest lists, seating assignments, guestbook messages, and detailed activity are scheduled for deletion six calendar months after the event date. Organizers receive email notices at least 30 days and 7 days before deletion and can export their guest list and download their guestbook messages from the event dashboard. Existing events receive a notice period before automatic deletion begins.
You can permanently delete your account and all associated data yourself at any time from Account settings. You can also contact info@reunela.com from the email address on your account for deletion or export help.
Accounts with no retained events are scheduled for deletion after one year of inactivity. Returning to your dashboard resets that clock. Accounts with upcoming events are protected. We send advance email notices before automatic account deletion.
Encrypted backup copies expire on a rolling 90-day schedule. Deletion from active systems does not immediately erase older backups; backups are restricted to recovery use.
Some payment, refund, security, and audit records may be kept longer where needed for legal, tax, accounting, fraud prevention, or dispute-resolution reasons.
Your rights and choices
Depending on where you live (including the EU/UK under the GDPR and California under the CCPA/CPRA), you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain uses.
You can exercise account deletion directly from Account settings. For any other request, email info@reunela.com from your account email and we will respond within the timeframe required by applicable law. We do not sell your personal information.
Security
We use access controls, private database policies, webhook verification, and rate limiting to protect organizer and guest data.
No online service can guarantee perfect security. If you believe your account or event data may be at risk, contact us right away at info@reunela.com.
Children and guests
Reunela is intended for event organizers and is not directed to children under 13.
Organizers are responsible for making sure they have permission to upload guest information for their event.
Contact
For privacy questions, deletion requests, or data access help, email info@reunela.com.
We may update this policy as the product, providers, or legal requirements change. Material updates will be reflected on this page.