Privacy policy

1. What data do we process?

• Account and contact details of the organiser (such as name and email address) for the contract, invoicing and support.
• Content of your website that you enter in the editor (text, settings, media, layout). This may also include details about guests or family that you add yourselves.
• RSVP and guest data when guests respond via a personal link (for example attendance, numbers, contact details or dietary requirements, insofar as you use those fields).
• Payment data: payments are handled by Stripe. We do not receive full card details; Stripe processes them as the payment provider.
• Technical data such as IP address, browser type and log files for security, troubleshooting and improving the service.
• AI functionality: if you use the assistant, the text or instructions you enter may be sent to OpenAI to generate a response. Technical telemetry may optionally be used on our servers when keys for it have been configured in our environment.

2. Purposes and legal bases (GDPR)

We use data for purposes including:

• performing the contract (providing the service, your account, communication about your order);
• legal obligations (such as bookkeeping and statutory tax record-keeping);
• legitimate interests (security, fraud prevention, improving the platform), where we weigh up the interests involved;
• consent where the law requires it, for example for certain non-essential cookies; see our cookie page.

3. Retention periods

We do not keep data for longer than necessary for these purposes, unless a longer period is required by law. Account and configuration data is kept for as long as you use the service and for a reasonable period afterwards for support and disputes. Log files are usually kept for a shorter time. RSVP data follows the lifecycle of your configuration and the choices you make in the product.

4. Processors and services

We use carefully selected processors, including:

• Convex: backend, storage and server logic.
• Vercel: hosting and deployment of the website.
• Stripe: payments.
• OpenAI: processing of input for AI features when you use them.
• Microsoft 365 / Microsoft Graph: sending transactional email from our backend.
• Google (Google Ads / gtag): measurement on the public site; see the cookie page for details. No separate consent management platform is integrated into this site; tags load as described on the cookie page.
• Crisp: chat functionality on public pages when the chat widget is switched on (see cookie page).

Where necessary, we enter into data processing agreements with processors. For transfers outside the EEA we use appropriate safeguards, such as the standard contractual clauses approved by the European Commission, where applicable.

5. Cookies

We use cookies and similar technologies. See our cookie page for an overview of names, purposes and retention periods.

6. Your rights

Under the GDPR you can, among other things, request access, rectification, erasure, restriction of processing, data portability (where applicable) and object to certain processing. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Send requests to [email protected].

7. Security

We take appropriate technical and organisational measures to protect personal data. However, no transmission over the internet is completely free of risk.

8. Changes

We may update this privacy policy. The “Last updated” date will then change. Please check this page from time to time.

10. Data controller

apeelingai B.V.
Sterrenkroos 144
8043 NX Zwolle
Netherlands

Email (contact and privacy): [email protected]

Chamber of Commerce (KVK): 92422543 · VAT: NL866037901B01