Privacy Policy

Welcome to OpenRSVP. Because we shifted to a self-hosted Open Source distribution model, we collect significantly less data than traditional SaaS platforms. We wrote this policy to explain exactly what information we collect, what we do not collect, and your rights regarding your data.

1. We Do Not See Your Event Data

This is the most important part of our privacy policy. OpenRSVP is a self-hosted application. When you deploy our software on your own servers, your database lives entirely on your infrastructure.

We do NOT collect, store, process, or have any access to:

• Your events, dates, or locations.
• Your guest lists, contact information, or email addresses of your invitees.
• Guest RSVPs, meal preferences, or dietary restrictions.

Your guests interact strictly with your server, not ours.

2. Information We Do Collect

We only collect information necessary to issue License Keys and prevent software abuse.

When you register for a Free Key or purchase a Commercial Key on our website (the "Validator Hub"), we collect:

• Your email address.
• Payment details (if purchasing a Commercial tier). Our payment provider securely processes these; we do not store your full credit card number.
• A cryptographically generated License Key tied to your email.

When your self-hosted application pings our servers to validate its license limits, we log:

• Your License Key.
• The IP address of your server (to prevent abuse and rate-limit checks).

3. How We Use Your Information

We use the minimal data we collect to:

• Issue and validate your License Keys.
• Enforce the tier limits outlined in our End User License Agreement (EULA).
• Send you important security updates regarding the software.
• Provide customer support if you lose your key or experience billing issues.

We do not sell your personal data.

4. How We Share Your Information

We share information with service providers who help us run our licensing infrastructure:

• Authentication and database providers to store your generated keys.
• Payment processors to handle billing for Commercial keys.
• Email delivery services to send you your Magic Links and License Keys.

We may also disclose your information if required by law.

5. Your Rights

You control your data.

• Account Deletion: You can request to delete your Validator Hub account and revoke your active License Keys at any time by contacting support.
• Guest Data: Since we do not host guest data, if a guest wishes to delete their RSVP information, they must contact you (the event organizer hosting the software) directly. We cannot delete data from a server we do not control.

6. Security

We use industry-standard encryption to protect the transmission of your License Keys between your self-hosted instance and our Validator Hub.

7. Changes to this Policy

We may update this policy. When we do, we will update the date at the top of this page.

8. Contact Us

If you have any questions, contact us at:
Email: support@korex.ovh