Privacy policy
Draft for review. The final version will be reviewed by an attorney before launch.
This policy explains what information Ribbon & Reply collects, why, and what we do with it. The short version: we use your information to deliver your invitations and run your event, we never sell it, and we never use your guests’ phone numbers or emails for marketing.
What we collect
Hosts: your name, email, password (stored encrypted), the event details you enter, photos you upload and your order history. Payments are handled by Stripe; we receive a confirmation, not your card number.
Guests: the name, phone number and/or email address a host enters for you, your RSVP, headcount and any note you leave, and whether you’ve opened your invitation.
Designers: your shop details, the designs you upload, the outside assets you declare and payout information handled by Stripe.
Basic technical information like your browser type and IP address, which our hosting provider uses to keep the site secure. We use a cookie to keep you signed in. We don’t use advertising cookies or sell data to advertisers.
How we use it
To deliver invitations, reminders and updates a host has asked us to send.
To show hosts who has opened their invitation and who has replied.
To send account emails like receipts, verification codes and RSVP notifications.
To pay designers their share of each order and to prevent fraud and abuse.
Text messages
Guest phone numbers are used only to send messages about the event the host invited them to.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with any third parties.
Reply STOP to any text to stop receiving them. See our texting terms for details.
Who we share it with
We never sell personal information.
We share it only with companies that help us run the service, and only what they need: Stripe (payments), Twilio (text messages), Resend (email), Vercel (website hosting) and Supabase (database and photo storage).
A guest’s RSVP and note are shared with the host who invited them. Designers never see host or guest details.
We may disclose information if required by law or to protect someone’s safety.
How long we keep it
We keep information only as long as we need it to provide the service, meet legal and tax requirements, and resolve disputes.
Hosts can remove a guest at any time, and can ask us to delete an event and its guest list.
Your choices
You can ask to see, correct or delete your information by emailing hello@ribbonandreply.com. Guests can make the same request about the details a host entered for them.
Reply STOP to stop texts. Every email includes a way to contact us.
Children
The service is meant for adults planning events. We don’t knowingly collect information from children under 13. Hosts can enter a child’s name as part of an invitation (for example, a birthday child), but accounts and guest contact details should belong to adults.
Security
We use encrypted connections, encrypted passwords and providers with strong security practices. No system is perfect, and we’ll tell affected users promptly if a breach involves their information.
Changes and contact
We’ll post updates here and email account holders about significant changes. Questions: hello@ribbonandreply.com.