Last updated 1 August 2026
1. Who we are
Ronayel provides event pages, invitations, RSVP collection and guest management. For host accounts we act as controller. For the guest details a host uploads, the host is the controller and Ronayel is the processor.
2. Data we collect
We collect only what is needed to run your events:
- account data: name, email, password hash, organisation profile and preferences
- event data: titles, schedules, venues, designs, images and settings
- guest data provided by hosts: names, email addresses, phone numbers and RSVP responses
- technical data: log entries, IP address and device information used for security and rate limiting
3. How we use data
To operate your events, deliver transactional email, prevent abuse, provide support and improve the product. We do not sell personal data and we do not use guest data for our own marketing.
4. Sharing
We share data only with the infrastructure and email providers required to deliver the service, each bound by contract, and with authorities where legally required.
5. Retention
Event and guest data is retained while your account is active. Event media follows the retention window on your plan, 30 days by default, after which it is archived and then deleted. Deleting your account removes your events, guests and media.
6. Security
Data is stored on managed, encrypted infrastructure with row-level access rules so accounts can only reach their own records. Password-protected events reveal nothing before the correct passphrase is entered, and passwords are stored only as salted hashes.
7. Your rights
You can access, correct, export or delete your data, object to processing and withdraw consent. Guests should contact the host who invited them; we assist hosts with such requests.
8. Contact
Privacy questions and requests can be sent through the contact page and are answered within one month.