Privacy Policy

1. Who we are

Sri Event Management ("we", "us") is a service that helps people plan events, send invitations, and collect RSVPs. This Privacy Policy explains what information we collect, how we use it, and your choices.

2. Information we collect

• Account information — email, name, hashed password, and the organization name you create.
• Event content — event titles, dates, locations, agendas, photos, dress codes, and any other content you add to your events.
• Contacts — names, email addresses, and phone numbers you import or add to your address book within the platform.
• RSVPs — names, optional emails/phones, headcounts, and messages submitted by your guests.
• Usage data — invitation view counts, view timestamps, and basic activity logs to help you track engagement and to improve the service.
• Cookies — session cookies for authentication and a small CSRF token cookie. We don't use third-party advertising or analytics cookies.

3. How we use information

• To provide the core functions of the service (creating events, sending invitations, collecting RSVPs).
• To send transactional emails on your behalf — invitations, RSVP confirmations, and event updates you trigger.
• To improve the product, fix bugs, and prevent abuse.
• To respond to your support and feedback inquiries.

4. How we share information

We do not sell your personal data, contacts, or guest information to anyone. We rely on a small set of trusted service providers to operate the platform:

• Vercel — application hosting (United States)
• Neon — managed PostgreSQL database (United States)
• Resend — transactional email delivery
• Google — only if you click Connect Google on the Contacts page (see section 5 for the full disclosure)

Each of these providers handles data only as needed to deliver the requested service.

5. Google API Services — Limited Use disclosure

When you choose to import contacts from Google by clicking the Connect Google button on your Contacts page, we use the Google People API with the OAuth scope https://www.googleapis.com/auth/contacts.readonly.

Sri Event Management's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In plain English, this means:

• We only read your Google Contacts when you explicitly initiate an import. We never read them in the background.
• We use the data only to copy contact names, email addresses, and phone numbers into your Sri Event Management address book — the user-facing feature you requested.
• We do not transfer Google user data to anyone for serving advertisements, credit-worthiness purposes, or to determine eligibility for credit.
• We do not allow humans to read your Google data, except (a) with your explicit opt-in for specific support requests, (b) as needed for security investigations and compliance with applicable law, or (c) when the data has been aggregated and anonymized.
• We do not store your Google OAuth access token after the import completes. The token is used once, in-memory, and discarded.
• You can revoke our access at any time at myaccount.google.com/permissions. Revoking access does not delete contacts already imported into your Sri Event Management address book — you can delete those manually from the Contacts page.

6. Data retention

Your account data, events, contacts, and RSVPs are kept for as long as your account is active. If you delete your account, we delete the associated data within 30 days. Backups are rotated within 90 days.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.) you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact srieventmanagement@gmail.com.

8. Security

We use HTTPS for all network traffic, encrypted storage at the database level, and industry-standard practices for authentication. No system is perfectly secure — please report any concerns immediately to the contact below.

9. Children

The service is not intended for children under 13. We don't knowingly collect data from children under 13. If you believe a child has signed up, contact us and we'll remove the account.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the dashboard. Continued use of the service after changes means you accept the updated policy.

11. Contact

Questions or concerns? Reach us at srieventmanagement@gmail.com.