Privacy Policy

1. Introduction

Welcome to PartyUnlocked ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit partyunlocked.com and use our services.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not use the Service.

2. Information We Collect

Information Provided by Hosts

When you register and create events as a Host, we collect:

• Name and email address (account registration)
• Event details: name, date, time, location, description, and type
• Event cover image uploaded by the host
• Food and drink menu options, dietary categories, and quiz questions
• Event password (stored securely, used to restrict guest access)

Information Provided by Guests

When you RSVP or interact with an event as a Guest, we collect:

• Name (as entered when submitting an RSVP)
• Attendance status: Coming, Not Coming, or Pending
• Guest headcount: number of adults and children attending
• Dietary preferences and requirements
• Food and drink choices (where the host has enabled menus)
• Quiz answers (where the host has enabled a quiz)
• Song requests added to the event playlist
• Guestbook messages (Premium events)
• Gift wishlist claims (Premium events)
• Phone number (optional, if provided)

Payment Information

When a Host purchases a Premium upgrade or credits, payment is processed by LemonSqueezy. We do not store your payment card details. We receive confirmation of the transaction (order ID, amount, and email) to activate your upgrade.

Automatically Collected Information

When you use the Service, we may automatically collect:

• IP address (used for rate limiting RSVP submissions to prevent abuse)
• Device and browser type
• Pages visited and time spent
• Referring website

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Process event RSVPs and manage guest lists on behalf of the host
• Detect and flag duplicate RSVP submissions using a normalised version of the guest name (server-side only; guests never see other guests' names)
• Enforce rate limits on RSVP submissions using IP addresses to prevent abuse
• Enable event hosts to view, manage, and export their guest data
• Process payments and activate Premium upgrades via LemonSqueezy
• Send email notifications to hosts when guests RSVP (via Resend)
• Improve our website and services
• Respond to support inquiries
• Comply with legal obligations

4. Hosts as Data Controllers

When guests submit RSVPs and interact with an event, they are providing personal data to the event host. In this context, the host acts as the data controller for their guests' data, and PartyUnlocked acts as a data processor, storing and displaying that data on the host's behalf.

Hosts are responsible for ensuring their collection and use of guest data complies with applicable privacy laws, including notifying guests about how their data will be used and not using guest data for purposes beyond managing their event.

Guests who have questions about how their specific RSVP data is being used should contact the event host directly.

5. Information Sharing

We may share your information in the following situations:

• With the Event Host: All RSVP data you submit (name, attendance, headcount, dietary needs, food and drink choices, quiz answers) is visible to the host of that event.
• With Other Guests (limited): Song requests and guestbook messages may be visible to other guests of the same event. Wishlist items and their claimed status are also visible to other guests. Guest names and RSVP details are never shown to other guests.
• LemonSqueezy: When you make a payment, your transaction details are processed by LemonSqueezy. We share your email and order information to fulfil your purchase.
• Resend: When a guest RSVPs to your event, we send an email notification to the host via Resend. This includes the guest's name and RSVP status.
• Legal Requirements: We may disclose information if required by law or to protect the rights, property, or safety of PartyUnlocked, our users, or the public.

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Server-side rate limiting to prevent automated abuse of RSVP submissions
• Guest names are never exposed to other guests — duplicate detection is handled entirely server-side
• Event password protection, giving hosts control over who can access their event page
• Payment card data is never stored by us — all card processing is handled by LemonSqueezy
• HTTPS encryption for all data in transit

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security. See our Terms and Conditions for our full disclaimer on security incidents.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service:

• Event and guest data (RSVPs, messages, songs, wishlist items) is retained for as long as the host's account remains active and the event has not been deleted.
• When a host deletes an event, all associated data (guest list, RSVPs, messages, songs, wishlist items) is permanently deleted.
• When an account is closed, all associated events and their data are permanently deleted.
• IP addresses collected for rate limiting are not stored beyond the duration of the rate limiting window.
• Payment records may be retained as required by law or for accounting purposes.

We recommend that hosts export their guest list as a CSV file before deleting an event, as deletions are permanent and cannot be undone.

8. Your Rights

Depending on your location (including under GDPR for users in the EU and UK), you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information ("right to be forgotten")
• Object to or restrict processing of your information
• Receive your data in a portable format
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at [email protected]. We will respond within 30 days. Note that if your data was submitted as a guest RSVP, you should also contact the event host directly, as they control that data.

9. Cookies and Local Storage

Our Service uses browser local storage (not traditional cookies) to maintain your login session via our authentication provider. This token is used solely to keep you signed in across page visits and is cleared when you log out.

We do not use advertising cookies or tracking cookies. You can clear local storage data at any time through your browser settings, which will log you out of the Service.

10. Third-Party Services

Our Service integrates with the following third-party services, each with their own privacy policies. We encourage you to review them:

• iTunes / Apple Music — used to search for songs. Searches are routed through our server to comply with Apple's API terms.
• LemonSqueezy — payment processing for Premium upgrades and credits.
• Resend — email delivery for host RSVP notifications.

Our website may also contain links to external websites. We are not responsible for the privacy practices of those sites.

11. Children's Privacy

Our Service is intended for use by adults creating and managing events. We do not knowingly collect personal information from children under 13 as account holders. Guest RSVPs may include children as part of a family headcount, but this data is submitted and controlled by the adult host or accompanying adult guest.

If you believe we have collected personal information from a child under 13 as an account holder, please contact us at [email protected] and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: [email protected]
Website: partyunlocked.com