Privacy

Shumukh helps people invite guests, collect RSVPs, and run events. This notice explains what personal data we handle and how — for both hosts who plan events and the guests they invite. We built Shumukh privacy-first: we earn from helping you run events, never from selling personal data.

Who is responsible for the data

When a host builds an event and adds guests, the host is the controller of that guest list — they decide who to invite and why. Shumukh acts as the processor, handling the data on the host’s behalf. For a host’s own account information, Shumukh is the controller.

What we collect

• Host accounts: your email address, display name, and language preference.
• Guest details: a guest’s name and, where provided, their email, phone, and group — added by the host or entered by the guest when they respond.
• Responses: RSVP status, party size, dietary needs, and any message a guest chooses to send the host.
• Records of activity: a log of actions taken on guest data and messages, kept so hosts can account for how a guest’s information was used.

Consent and lawful basis

Every guest record carries a note of where the contact came from and the host’s basis for holding it. Hosts confirm they have a genuine relationship or consent before adding and contacting guests. Every message we help send includes a working opt-outlink, and once a guest opts out — or an address bounces or reports a message as spam — we block further messages to them automatically.

How we use the data

We use it to run the event: to show the invitation, collect and organise RSVPs, and (once a host connects a messaging provider) deliver invitations, reminders, and updates. We do not sell personal data, and we do not use guests’ details to advertise to them.

Sharing

We share data only with the service providers that make the product work — for example our hosting and database provider, and any email or messaging provider a host connects — and only to the extent needed to run the event. We do not share guest lists between events or build a profile of anyone across events.

Retention

Guest and event data is kept while the event is active. Hosts can remove individual guests or delete an event at any time; deleting an event removes its guests, responses, messages, and logs.

Your rights

Guests can ask the host who invited them to access, correct, or delete their information, or use the opt-out link to stop messages. You can also contact us and we will help route the request. Depending on where you live, you may have rights under laws such as the UAE PDPL or the GDPR.

Hosts can delete their account and its data at any time — see Delete your account for the in-app steps and how to request deletion.

Security & location

Data is encrypted in transit, access is restricted, and changes to guest data are logged. We host on established cloud infrastructure and are working toward in-region hosting for the Gulf. If a data location matters for your event, contact us before you begin.

Changes & contact

We will update this notice as the product grows and note the date above. Questions about privacy? Write to hello@shumukh.online.