Privacy Policy

Last updated: August 13, 2026

1. Introduction

SendKard ("we", "us", or "our") operates the SendKard platform, accessible at sendkard.app. This Privacy Policy explains how we collect, use, and protect personal information when you use our service — including information about people who host events and people who are invited as guests. By using SendKard, you agree to the practices described here.

2. Information We Collect

From account holders (hosts):

  • Account information: email address, phone number, and display name when you register.
  • Profile information: profile photo you choose to upload.
  • Social login data: if you sign in with Google or Facebook, we receive your name, email address, and profile picture from those providers.
  • Event content: invitation details, event titles, dates, venues, uploaded photos, background music files, and QR payment images you create or upload.
  • Contact list data (subscription plans only): names and details of contacts you save for reuse across events, and their RSVP history with your events.
  • Payment information: for manual payment verification, we collect the transaction reference number and amount you submit, and the payment screenshot you upload. We do not collect or store full payment card numbers.
  • Usage data: pages visited, features used, and device/browser information for improving the service.

From guests (people invited to an event, who may not have a SendKard account):

  • Name and any information you choose to submit when RSVPing to an invitation.
  • RSVP status (attending / not attending) and any message or note you leave for the host.
  • We do not require guests to create an account to RSVP.

3. How We Use Your Information

  • To create and manage your account.
  • To send verification codes and important account notifications.
  • To display and share your digital invitations with guests via a shared link.
  • To process and verify payments for paid plans.
  • To maintain your saved contacts and RSVP history (subscription plans).
  • To improve and maintain the SendKard platform.
  • To respond to your support requests.
  • To detect and prevent fraud, spam, or abuse of the Service (e.g. RSVP spam, payment verification fraud).

4. How We Share Your Information

We do not sell your personal information. We may share data with:

  • Service providers: Supabase (database, authentication, and file storage for photos/audio), Vercel (hosting), Resend (email delivery), and Telegram (OTP delivery). These providers process data only as needed to deliver our service.
  • Payment processors: if you make a paid purchase or subscribe, relevant payment or verification information may be shared with our payment processor(s) to complete the transaction.
  • Other users: your invitation content (names, event details, photos) is visible to anyone with the shared invitation link, as that is the core purpose of the Service. RSVP responses submitted by guests are visible to the host of that event.
  • Legal requirements: if required by law or to protect our rights.

5. Data Retention

  • We retain host account data for as long as your account is active. You may request deletion of your account and associated data by contacting us.
  • Guest RSVP data (name, RSVP status, message) is retained for as long as the associated event exists, since it is part of the event record the host relies on.
  • Payment verification records (transaction reference, screenshot) are retained for a reasonable period for accounting, dispute resolution, and fraud prevention purposes.
  • Some data may be retained for legal or operational reasons even after account deletion.

6. QR Payment Feature

If you upload your own QR payment code to your invitation, that image is stored and displayed to your guests as part of your invitation. SendKard does not process, verify, or have visibility into any payments guests may send using that QR code — this happens entirely outside the Service, directly between the host and guest. See our Terms of Service for further detail on liability.

7. Security

We implement reasonable technical and organisational measures to protect your data, including encrypted data storage and secure authentication. However, no system is completely secure and we cannot guarantee absolute security.

8. Children's Privacy

SendKard is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Your Rights

If you are a host (account holder), you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Request deletion of your account and data.
  • Withdraw consent where processing is based on consent.

If you are a guest who submitted an RSVP without creating an account, you may contact the host directly to have your RSVP information corrected or removed, or contact us directly and we will assist where possible.

To exercise these rights, contact us at the email below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of SendKard after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@sendkard.app