Privacy Policy

Overview

This policy explains what information eveningof, operated by BCode Systems LLC, collects, how we use it, and the choices you have. We collect only what we need to run event pages. We do not sell personal information, and we do not use advertising or analytics trackers.

Information we collect

From hosts, when you create and manage an event page:

• your name, email address, and optionally phone number;
• your event page password, which we store only in hashed form and cannot read;
• event details you add, such as dates, venues, schedule, story text, registry and payment-app handles, music links, and photos;
• payment confirmation from Stripe. Card details go directly to Stripe, and we never receive your full card number.

About guests, provided by the host or by guests themselves:

• names, and optionally email addresses and phone numbers, that a host enters when creating invitations;
• RSVP responses, including attendance, names of accompanying guests, and any message;
• photos guests upload to an event page.

Automatically:

• basic technical logs, such as IP address, browser type, and pages requested, kept by our hosting provider for security and troubleshooting;
• one cookie that keeps a host signed in to their event dashboard for up to 7 days. We use no advertising or tracking cookies.

How we use information

• to create, display, and host event pages;
• to send emails you request or expect, such as your signup confirmation, invitations a host sends, and RSVP notifications to the host;
• to process payments and prevent fraud;
• to keep the service secure and fix problems;
• to respond when you contact us.

We do not send marketing emails to guests.

Who can see what

• Event pages are visible to anyone with the link. That includes the event details and photos the host has approved.
• RSVPs, guest contact details, and unapproved photos are visible only to the host, through their password-protected dashboard.

Service providers

We share information only with the providers that run parts of the service for us:

• Stripe for payment processing;
• Vercel for website hosting;
• Neon for database storage;
• Cloudinary for photo storage;
• Resend for sending email.

These providers may process data in the United States. We may also disclose information if required by law, or to protect the rights and safety of our users or the service.

Retention and deletion

We keep event pages and their content until the host asks us to delete them. To delete an event page and its RSVPs, invitations, and photos, or to ask us to remove specific information about you, email info@bcodesystems.com. Guests can ask the host, or contact us directly. Payment records are kept as required for tax and accounting purposes.

Your rights

Depending on where you live, including California under the CCPA/CPRA, you may have the right to access, correct, or delete your personal information, and to not be discriminated against for exercising these rights. We do not sell or “share” personal information for cross-context behavioral advertising. To make a request, email info@bcodesystems.com.

Children

Event pages are created and managed by adults. Events such as quinceañeras often involve minors, and hosts are responsible for having a parent or guardian’s permission before posting a child’s photo or information. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Security

We use encrypted connections (HTTPS), store passwords only as salted hashes, and limit access to data. No online service is perfectly secure, so please choose a strong event password and share event links thoughtfully.

Changes

We may update this policy. When we do, we will change the effective date above and, for significant changes, notify hosts by email.

Contact

Questions or requests: info@bcodesystems.com.