Privacy policy
This policy is for the people who use the AisleDisplay app: event businesses (partners) and the hosts they invite. A host is the person or people the event is for, such as the couple at a wedding. Guests have their own, shorter notice on each event website.
Who is responsible
AisleDisplay is made by Savvas Papaiakovou in Cyprus, who is responsible for your data under the GDPR (the “controller”). You can reach him at aisledisplayapp@gmail.com.
What we keep
Partners: your business’s name and type, a contact email address and phone number, the email address you sign in with, and the events you create.
Hosts: the email address you sign in with, your names, and everything you put into your event website: dates, places, wording, photos and your guest list. You add your guests’ details yourself, so please only add people who expect to hear from you.
Everyone: when you last signed in, and short-lived records that keep sign-in safe, such as how many wrong codes were typed.
Why
To run your account and your event website, to send you sign-in codes and invitations, and to keep the service safe. No adverts, no tracking, and nothing is sold.
The legal basis
Giving you the service you signed up for (a contract). Keeping the service safe, for example by limiting wrong sign-in codes, is our legitimate interest. The guest list and the rest of what a host adds to their website are handled on our legitimate interest too: a host needs a guest list to invite people, and guests expect one.
Signing in with Google
If you choose “Continue with Google”, Google tells us your email address and your name, and nothing else. Google handles that sign-in under its own privacy policy, as a separate controller.
How long we keep it
Four months after the event, the host’s event website is deleted: guests, replies, photos, the invitation, the seating chart, the Wishbook, contact details and addresses. The event’s record keeps only the date, the venue’s name and the totals (how many guests, replies and photos). The host’s names and the website address are removed too, and the address may later be used by someone else. A host’s sign-in email is deleted with their last event.
A partner’s account stays for as long as the partnership does; when it is deleted, its events go with it. Backup copies are deleted within three months.
Who else handles it
A few companies run parts of the service for us, and may use your data only on our instructions: Cloudflare (hosting, and photo storage in the EU), Supabase (the database and sign-in, in Frankfurt), ImageKit (resizing photos, in Frankfurt), Resend (sign-in codes and invitations, sent from Ireland), Upstash (counters that stop too many attempts) and GitHub (our code, and scheduled jobs).
Outside the EU
Your data is stored in the EU. Some of these companies can also handle data outside it, mostly in the United States: Cloudflare, ImageKit, Resend, Upstash, GitHub and, in rare cases, Supabase. All of them are bound by the European Commission’s standard contractual clauses, and most are also certified under the EU-US Data Privacy Framework.
Your rights
You can ask to see the data we hold about you, to correct it, to get a copy, or to delete it. Email aisledisplayapp@gmail.com and we will do it without delay. Hosts can also delete guests and photos themselves at any time.
If you are not happy
You can complain to the Commissioner for Personal Data Protection in Cyprus: gov.cy/dataprotection.
No automatic decisions
Nothing about you is decided by a computer on its own.
Cookies
We only use the cookies and browser storage the app needs to work, such as keeping you signed in. Every one of them is listed in the cookie policy.