Privacy Policy
This policy explains what data Occasi collects, how we use it, and what your rights are. We've kept it plain-English because privacy policies should be readable, not legalese.
1. Who we are
Occasi is a UK-based service that helps people create event websites and collect RSVPs for weddings, birthdays, baby showers and other private events. You can contact us at [email protected].
2. Data we collect about you (the host)
When you create an account, we store:
- Your email address and chosen password (passwords are securely hashed — we never see them in plain text).
- Your name (if you provide it during signup).
- Your subscription status, Stripe customer ID, and billing details. Payment card details themselves are handled by Stripe — they never touch our servers.
- The event content you create: names, dates, venues, photos, story, schedule, dress code, etc.
- Basic usage logs (when you sign in, errors that occur) to help us debug and improve the service.
3. Data we collect about your guests
When your guests submit an RSVP, we store the data they provide: their name, attendance, meal choice, dietary needs, song requests, transport preference, and any personal note. We do not ask guests to create an account.
This data belongs to you, the host. You can view it in your dashboard and export it as a CSV at any time. We don't share it with anyone else.
4. How we use this data
- To run the service — show your event website, store and display your RSVPs.
- To process payments (via Stripe).
- To send you essential service emails (account confirmation, billing receipts, important changes).
- To improve Occasi — we look at aggregate usage patterns, not individual events.
We do not sell your data, share it with advertisers, or use it to train AI models.
5. Where your data lives
Your event data and your guests' RSVPs are stored on UK-and-EU servers (Supabase, with Cloudflare for our website hosting). We don't transfer your data outside the UK/EU.
6. Cookies
We use a small number of essential cookies to keep you signed in and remember your preferences. We don't use tracking cookies or third-party advertising cookies on Occasi.
7. Your rights (UK GDPR)
You can:
- Access all the data we hold about you — view it in your dashboard, or email us for a full export.
- Correct any inaccurate information — edit it directly in the dashboard.
- Delete your account and everything in it — one click in Settings, or email us.
- Take your data with you — export RSVPs to CSV any time.
- Object to how we use your data — contact us and we'll discuss.
- Complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data.
8. How long we keep data
While you have an active account, we keep your event data and RSVPs so you can use the service. If you delete your account, we delete your data within 30 days. Some billing records are kept for 6 years (UK accounting requirement). Anonymous aggregate analytics may be kept indefinitely.
9. Children's data
Occasi is intended for adults arranging events. We don't knowingly collect data from anyone under 16. If a guest's RSVP is submitted on behalf of a child (e.g. a 3-year-old's meal choice), the parent is responsible for that consent, and we treat the data the same as any other guest entry.
10. Changes to this policy
If we make material changes to this policy, we'll email you and update the "Last updated" date above. Minor wording tweaks happen without notification.
11. Contact
For any privacy question, email [email protected] and we'll get back within 5 working days.