Capyvite Help

Privacy Policy

Last updated: February 13, 2026

1. Introduction

Capyvite ("we", "our", or "us") operates the capyvite.com website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Capyvite, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Host Information

  • Email address - Required for account creation and authentication via magic link
  • Name - Optional, for profile display
  • Payment information - Processed securely by Stripe (we never see your card details)

2.2 Attendee Information

  • Name - Required for RSVP to events
  • Email - Optional, only if you opt-in or host requires it, for event reminders
  • RSVP status - Whether you're attending, waitlisted, or cancelled

2.3 Event Information

  • Event title, date, time, location, capacity
  • Description (optional)
  • Privacy settings configured by the host

2.4 Technical Information

  • IP address - For security and rate limiting
  • Browser/device info - Via cookieless analytics for product improvement

3. How We Use Your Information

  • Provide the service - Create events, manage RSVPs, send reminders
  • Process payments - For Pro subscriptions via Stripe
  • Improve our service - Analyze usage patterns to make Capyvite better
  • Communicate with you - Service updates, magic link emails, support
  • Ensure security - Prevent abuse, fraud, and unauthorized access

4. Legal Basis (GDPR)

We process your data under the following legal bases:

  • Contract - Necessary to provide event hosting services
  • Consent - Email reminders (you can opt-out anytime)
  • Legitimate Interest - Security, analytics, product improvement

5. Data Retention

We follow an ephemeral data model to minimize data storage:

  • Attendee data - Deleted 30 days after event ends
  • Event data - Deleted 30 days after event date
  • Cancelled RSVPs - Immediately hard-deleted
  • Host accounts - Kept until you delete (30-day grace period)
  • System logs - 90 days for security purposes

6. Data Sharing

We share your data with these service providers:

  • Supabase - Database hosting (EU servers)
  • Stripe - Payment processing
  • Vercel - Website hosting
  • PostHog - Cookieless product analytics (EU data residency)
  • Resend - Transactional emails

We do not sell your personal data.

7. Cookies and Analytics

We use PostHog for cookieless analytics. No cookies or local storage are used for analytics tracking. PostHog processes data in the EU with in-memory persistence only.

  • Essential only - Supabase authentication session (required for hosts)

No analytics cookies are set. No consent banner is needed because our analytics are fully cookieless.

8. Your Rights

Under GDPR and CCPA, you have the right to:

  • Access - Request a copy of your data
  • Correction - Update inaccurate information (via Account Settings)
  • Deletion - Delete your account (via Account Settings)
  • Portability - Export your data (CSV for Pro users)
  • Object - Opt-out of email reminders

To exercise these rights, contact us at privacy@capyvite.com

9. Children's Privacy

Capyvite is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

10. International Data Transfers

Data may be transferred to the United States (Vercel, Stripe). Analytics data is processed in the EU (PostHog EU). We ensure appropriate safeguards through Standard Contractual Clauses with our processors.

11. Security

We protect your data with:

  • TLS encryption in transit
  • Database encryption at rest
  • Row-Level Security (Supabase)
  • Magic link authentication (no passwords to breach)
  • Rate limiting to prevent abuse

12. California Residents (CCPA)

California residents have additional rights:

  • Right to know what data we collect
  • Right to delete your data
  • Right to opt-out of "sale" - We do not sell your data

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with a new "Last updated" date.

14. Contact Us

For privacy questions or concerns: