Privacy Policy

1. Who we are and what this policy covers

FlashRSVP is the controller of personal data collected on this site. The contact channel is support@flashrsvp.com.

Important: guest data processed inside the platform — invitations, acceptances, logistics — is processed on behalf of client companies, under contract and the policies presented in each portal. This policy covers the public site only.

2. What data we collect

Contact form: name, corporate email, company and message.

Technical browsing data: IP address, date and time of access, browser type and server logs, collected automatically for security and operations.

Language preference: stored in the session cookie to keep the site in your chosen language.

Anti-spam verification: the form uses Cloudflare Turnstile, which processes technical browser signals and the IP address to tell people apart from bots.

3. Why we use it and legal bases

To reply to your contact or demo request — pre-contractual procedures (LGPD, art. 7, V).

To keep the site secure and prevent abuse — legitimate interest (LGPD, art. 7, IX).

To comply with legal or regulatory obligations, where applicable (LGPD, art. 7, II).

4. How we handle your message

Form content is delivered by email to our commercial team and is not stored in a site database.

5. Who we share it with

Infrastructure processors strictly necessary to operate the site: cloud hosting, email delivery service and Cloudflare (anti-spam verification).

We do not sell personal data or share it for advertising purposes.

6. International transfers

Some providers may process data outside Brazil. In those cases we adopt safeguards compatible with the LGPD.

7. How long we keep it

Contact messages are kept for as long as needed to handle the request and meet legal obligations, and then discarded.

8. Your rights

Under LGPD art. 18 you may request: confirmation of processing; access; correction; anonymization, blocking or deletion; portability; information about sharing; and withdrawal of consent, where applicable.

To exercise any right, write to support@flashrsvp.com. We will reply within the legal deadlines.

9. International application

FlashRSVP serves events with guests in dozens of countries. Where local data protection law applies to you, your rights are honored under it.

European Union, EEA and United Kingdom: the legal bases and rights of the GDPR and UK GDPR apply — access, rectification, erasure, portability, restriction and objection, plus the right to lodge a complaint with your local supervisory authority.

California (US): CCPA/CPRA rights apply — to know, correct and delete personal data. We do not sell personal data or share it for behavioral advertising.

The channel to exercise any of these rights is the same: support@flashrsvp.com.

10. Cookies

The site uses essential cookies only. Details are in the Cookie Policy.

11. Security

We adopt technical and organizational measures consistent with the state of the art: encryption in transit (TLS), access control, activity logging and continuous monitoring.

12. Children and teenagers

The site targets a corporate audience and is not intended for people under 18.

13. Changes to this policy

This policy may be updated to reflect changes to the site or to legislation. The current version will always be on this page, with the date shown at the top.

14. Data protection officer and contact

The channel for data protection matters, including contact with the DPO, is support@flashrsvp.com.