Privacy Policy

This Privacy Policy explains how SHEREHE ("we", "us") collects, uses and protects information when you create events, RSVP, capture or view photos through our service.

1. Information we collect

• Account data — email, phone number, name and avatar you provide at signup.
• Event data — event title, date, location, templates and guest list you create as a host.
• Guest data — RSVP responses, nicknames and avatars submitted via invitation links.
• Photos — images uploaded through the shared camera or upload flow.
• Communications data — phone numbers used for SMS invitations and OTP login; email addresses used for account and event notifications.
• Technical data — IP address, device, browser, and basic analytics about how the service is used.

2. How we use information

• To operate events, deliver invitations, store RSVPs and host the locked gallery.
• To reveal galleries at the time the host has scheduled.
• To moderate reported content and prevent abuse.
• To improve the product and respond to support requests.

3. Photo privacy

Event photos are stored in a private bucket. Before the reveal time set by the host, no one but the host (and SHEREHE for moderation purposes) can view them. After reveal, photos are accessible to invited guests via signed URLs.

4. Sharing

We do not sell your personal data. We share data only with infrastructure providers needed to run the service (hosting, storage, authentication) under data-processing agreements.

For communications, we share phone numbers with Twilio to send SMS invitation messages and OTP login codes, and we share email addresses with Resend to deliver transactional emails (invitations, confirmations, gallery reveals). Both providers are contractually bound to use your data only to deliver messages on our behalf.

No mobile information will be shared with third party/affiliates for marketing or promotional purposes. All categories of mobile data — including phone numbers and SMS opt-in consent — are excluded from any third-party sharing for marketing or promotional use.

5. Retention

Event data and photos are retained for as long as the host keeps the event active. Hosts can delete an event at any time, which removes all associated photos and RSVPs.

6. Your rights

You may request access, correction, export or deletion of your personal data by contacting us. Guests can also remove their own uploaded photos at any time.

7. Children

SHEREHE is not directed at children under 13 (or under 16 in the EEA). Hosts are responsible for ensuring appropriate consent when minors are pictured at their events.

8. Contact

Questions? Reach us via the contact page.