Privacy Policy
Welcome to EmailRSVP (located at https://emailrsvp.com), a service operated by Soliroush LLC ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your data when you use our services.
1. Information We Collect
We collect information you voluntarily provide and information automatically generated through your use of our services.
Personal Data (provided by you):
- Full name and email address
- Account credentials and authentication data
- Contact preferences and communication settings
- Billing and payment information (processed via approved third-party payment gateways like Google Play Store and Lemon Squeezy — we do not store raw card data)
Usage Data (collected automatically):
- IP addresses, browser type, and operating system
- Pages visited, features used, and time spent on the platform
- Device identifiers and session tokens
- Error logs and performance diagnostics
2. How We Use Your Information
We use your data strictly for legitimate business and operational purposes:
- To create and manage your account and authentication
- To deliver, maintain, and improve our services
- To send transactional communications (e.g., account confirmations, billing receipts)
- To respond to support inquiries and resolve disputes
- To detect, prevent, and investigate fraud or security incidents
- To comply with our legal obligations
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
- Contract performance — processing necessary to provide you the services you have subscribed to
- Legitimate interests — fraud prevention, security monitoring, and product improvement, where these interests are not overridden by your rights
- Legal obligation — compliance with applicable laws and regulations
- Consent — for marketing communications, which you may withdraw at any time
4. Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile data | Duration of account + 30 days after deletion |
| Financial & billing records | 7 years (tax and accounting obligations) |
| Usage and activity logs | 12 months rolling |
| Support communications | 3 years |
| Security and access logs | 90 days |
Upon expiry of the applicable retention period, data is securely deleted or anonymized.
5. Sharing Your Information
We do not sell your personal data to third parties. We may share data only in the following limited circumstances:
- Service providers: Trusted sub-processors (e.g., Google Cloud, Firebase, Lemon Squeezy) who are contractually bound to process data only on our instructions and under equivalent data protection standards
- Legal requirements: Where required by law, court order, or government authority
- Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred
- Protection of rights: Where necessary to enforce our Terms of Service, prevent fraud, or protect the safety of our users
6. Security of Your Information
We implement administrative, technical, and physical safeguards to protect your data, including encryption of data in transit (TLS 1.2+) and at rest, role-based access controls, and regular vulnerability assessments.
7. Contact Us
For privacy-related questions or to exercise your data rights, please contact us at: Contact Form