RSVP Circle – Privacy Policy and Terms

Draft for the lawyer's review (C-6), not yet in force. RSVP Circle is published by ABCIT Group (AB Consulting LLC). Last updated: November 2, 2026.

1. Who we are and what this covers

RSVP Circle helps people invite friends and family to personal events and keep track of who is coming. This policy covers the RSVP Circle apps for iPhone and Android, the host dashboard on the web and the RSVP pages guests open from their invitation. "Hosts" are the people who create events; "guests" are the people they invite. Hosts must be 18 or older and in the United States.

2. What we collect

• Hosts: name, email address or mobile number, how you sign in (password stored only as a salted hash, or a texted code), the date you confirmed you are 18 or older, the events you create (title, date, time, place, address, parking notes, a picture if you add one, the texts of your invitations and reminders) and your co-hosts.
• Guests, entered by a host: names (and a spouse's or family members' names), phone numbers, email address and the host's own notes.
• Guests' answers: yes, maybe or no; how many adults and kids; kids' ages if the host asks; food preferences; which parts of the event you'll come to; a dish you sign up for; an optional note to the host; the time of the reply; and your own choice about reminders (text, WhatsApp or none, for each of your family's numbers) with the time and the wording you agreed to. Please don't put health details such as allergies in the note unless you want the host to know them.
• Messages: for reminders the app sends, the delivery status from the carrier or WhatsApp, and any STOP, START or HELP reply, kept with your number stored only as a one-way code.
• Purchases (hosts): which pass or subscription was bought, the price, the store (Apple or Google) and the store's transaction number. We never see or store card details: the store handles payment.
• Phones (hosts): a push notification token for each phone you sign in on, so we can tell you about new RSVPs.
• Reports: if a guest reports an event, the reason they chose (not who they are).
• Usage counts: events such as "an RSVP was received" or "a reminder was sent", with the host's and event's internal ids and a few fixed values (for example the event type or a range of family sizes). They never contain a name, number, email, address, note or event title.
• Security records: short-lived counters to stop password guessing and flooding, keyed by a one-way code of the internet address, email or number (never the address itself).

3. How we use it

Only to run the hosts' events (invitations, reminders, updates, planning food and seating), to keep accounts secure, to process purchases, to prevent abuse, to answer support and legal requests, and to see how the service is used in aggregate. We do not sell or rent personal information, share it for advertising, or use guests' details for marketing. Mobile opt-in data and consent are not shared with third parties or affiliates for their own purposes.

4. Who else handles it

• Amazon Web Services (United States): hosting, storage, backups, text messages (AWS End User Messaging) and email through Amazon SES (password-reset links to hosts, and our own alert emails).
• Apple and Google: in-app purchases (the stores process payment) and, once enabled, push notifications to hosts' phones (the notification shows only the event's name).
• Meta (WhatsApp): only for guests who choose WhatsApp reminders, through AWS.
• Hosts and the co-hosts they invite can see their events' guest lists, including guests' phone numbers and email addresses, and can export them (for example to a spreadsheet), change answers and texts, and send reminders. A host chooses their co-hosts and can remove them at any time. The service's owner sees counts only; an event's title is shown to the owner only when reviewing a report about it, and that review is logged.

We may disclose information if the law requires it, and we will tell the affected host when we are allowed to.

5. Where it's kept and how it's protected

In the United States, encrypted in storage and in transit. Each host's data is kept separately, and the service is tested so that one host can never reach another's. Passwords are stored as salted hashes, sign-in is rate limited, and the apps keep the sign-in and the offline guest list in the phone's secure storage (Keychain / Keystore). No advertising, no tracking, and nothing is loaded from other companies' servers. Tapping "Add to calendar" or "Open in Maps" opens your own app; nothing is sent to it unless you tap.

6. How long we keep it

7. Your choices and rights

• Hosts can see and change everything in the app, export their guest lists, and delete their account in the app (Settings → Delete account) or as described at /delete-account. Deletion signs you out everywhere at once and removes the account, events, guest lists, pictures and logs; you get a receipt. Copies in our backups and recovery system are kept for 30 days and then expire, so everything is gone within 30 days.
• Guests can change their answer and reminder choice on their RSVP page, reply STOP to any reminder, and ask the host to remove them. You can also write to us (section 12) and we will ask the host or remove your details.
• Depending on your state (for example California, Colorado, Connecticut, Virginia and others), you may have rights to know, access, correct and delete your personal information, and to not be discriminated against for using them. We don't sell or "share" personal information for cross-context advertising, so there is nothing to opt out of. We answer requests within 45 days.

8. Children

Hosts must be 18 or older. Guests' children may appear in a guest list as "kids" with an age, entered by the host or the family; we don't knowingly collect anything else about children, and kids' ages are deleted 12 months after the event.

9. Changes

We'll post changes here with a new date, and tell hosts in the app before an important change takes effect.

10. Messaging terms (text and WhatsApp)

The first invitation always comes from the host's own phone. The app itself sends a message only to guests who chose "Text me reminders" or "WhatsApp me reminders" on their own RSVP page; a host saying you agreed is not enough. Those guests get up to three reminders per event and, if the time or place changes, a short update; never marketing. Message and data rates may apply; message frequency varies by event. Reply STOP to stop, START to resume, or HELP for help, or change your choice on your RSVP page at any time. Carriers are not liable for delayed or undelivered messages. Help: support@abcitgroup.com.

11. Terms of Use

1. Who can use it: hosts aged 18 or over, in the United States, for personal social events such as family gatherings, religious events, birthday parties and similar get-togethers.
2. Acceptable use: no marketing or sales, fundraising appeals, political messages, links to other websites, harassment, or anything unlawful. Messages that look like these are refused, and repeated attempts pause sending on the account until we review it. We may suspend an account that breaks these terms; you can ask us to review it.
3. Co-hosts: co-hosts you invite can see, change and export your guests' details and send reminders for the event they help with; you are responsible for who you invite as a co-host.
4. Your guests: invite only people you know personally, and only add their details if you're allowed to. The RSVP link sent to a family is personal; please don't share it publicly. Guests can report an event; we review reports and don't take events down automatically.
5. Purchases: prices are shown before you buy. Event Passes are one-time purchases for one event; Host Plus renews every year until you cancel it in your App Store or Google Play settings. Refunds are handled by Apple or Google under their rules. Prices may not include tax.
6. The service: provided as-is and as available. We work to keep it running and your data safe, but can't promise it will never be interrupted. To the extent the law allows, our liability is limited to what you paid us in the 12 months before the claim. [Governing law and dispute terms: to be completed by the lawyer.]
7. Ending: you can delete your account at any time in the app.

12. Contact

Privacy questions and requests: support@abcitgroup.com. Security reports: security@abcitgroup.com. ABCIT Group, AB Consulting LLC, United States. [Postal address: to be added before launch.]