Privacy
Last updated 15 September 2026.
We Do RSVP builds wedding websites for couples and collects RSVPs from their guests. This page explains what we collect, why, and who we share it with. If anything here is unclear, email hello@wedorsvp.com and we’ll answer directly.
What we collect
From a couple building a site: an email address, the names, dates, venues, photos and other content they add to their site, and payment details, which we never see or store ourselves — Stripe handles those. From a guest RSVPing: the names they enter, whether they’re attending, and anything optional they choose to fill in, such as an email address, a dietary note or a message. We also keep a hashed (not readable) version of a guest’s IP address for a short time, purely to stop the RSVP form being spammed.
Why we collect it
To build and host the couple’s website, to show them their RSVPs, to send the emails described below, and to take payment for the one-off site fee. We don’t sell or rent anyone’s data, and we don’t use it for advertising.
Emails we send
A sign-in link to the couple when they ask for one; a confirmation once their site is live; and, if they’ve switched it on, a notification each time a guest RSVPs. A guest who leaves an email address gets a short confirmation of their own reply. We use Resend to send these — see their own privacy policy for how they handle delivery.
Who we share it with
Only the processors that make the product work: Supabase (database, login and photo storage), Stripe (payment), Resend (email) and Vercel (hosting). Each only sees what it needs to do its job. We don’t share data with anyone else, and a couple’s guest list and RSVPs are never visible to any other couple using We Do RSVP.
How long we keep it
A published site, and its RSVPs, stay live until 30 days after the wedding date, after which the site closes to new RSVPs but the record isn’t immediately deleted. If a couple wants their site and its data removed sooner, email us and we’ll do it.
Cookies
We use one cookie to keep a couple signed in, and, on a password-protected site, one cookie to remember that a guest has entered the password. Vercel Analytics, which we use to see how the site is doing, doesn’t use cookies or track people across sites. That’s the whole list — nothing here needs a cookie banner.
Your rights
Under UK data protection law you can ask to see, correct, or delete the personal data we hold about you, or ask us to export it. Email hello@wedorsvp.com and we’ll sort it out, usually within a few days.
Changes
If this policy changes in a way that matters, we’ll update the date at the top of this page. The current version always lives at www.wedorsvp.com/privacy.