Privacy policy
Last updated 8 October 2026
Who is responsible
Bevyd is operated by Harsh Punn. . Harsh Punn is responsible for the personal data described here. Write to hello@bevyd.com (or ) with any question or request. Bevyd follows the data-protection rules that apply in the UK and the EU (GDPR) as its baseline for everyone, which also covers India’s DPDP Act.
What we collect
Hosts (people who create invitations):
- your name, email address and, if you use it to sign in, your phone number; your username and country;
- your events: the title, date, place, the address you enter, messages you write and the design you pick;
- your guest list: each guest’s name and the phone number or email address you give us, and the replies they send;
- your purchases: what you bought, the amount, your billing country, the name and email on the receipt, and our payment record. Card and bank details go to our payment partner and are never seen or stored by Bevyd.
Guests (people who receive an invitation):
- what the host gave us about you (your name, and your phone number or email address);
- your reply: whether you are coming, plus-ones, a dish, a meal choice and a note to the host;
- when you opened the invitation, and (to prove it is you) the phone number or email you type to confirm a reply, which is compared with the one the host gave and not kept on top of it;
- a small signed token stored in your own browser, so your invitation opens in full again on the same device.
Everyone: technical data needed to run and protect the service. To limit abuse we count visits from each visitor’s address using a one-way scrambled form of it; the raw address is not stored.
Why we use it
- To provide Bevyd: show invitations, record replies, show the host the guest list and headcount. (Needed to do what you ask.)
- To take payments, give receipts and handle refunds. (Needed to do what you ask, and to keep the financial records the law requires.)
- To send you sign-in and account emails, such as confirming your email address or resetting your password.
- To email a reminder to a guest who has not replied, when the host presses Remind. We use the guest’s first name and the email address the host gave us, and the email links to that guest’s own invitation. (Needed to do what the host asks.)
- To keep Bevyd secure and to prevent abuse. (Our legitimate interest.)
We do not sell personal data, and we do not use guest details for advertising.
What guests and link previews show
When a host chooses to keep the address private, a guest sees only the area until they have replied and confirmed it is them, and the picture and text shown when a link is pasted into a chat show only the area. The invitation’s link is personal to each guest.
Who handles the data for us
These services process personal data on our behalf:
| Service | What it does for us | Where | Transfer basis |
|---|---|---|---|
| Supabase | Database, sign-in and the servers that run Bevyd | United States (North Virginia) | EU-US Data Privacy Framework and standard contractual clauses (to confirm) |
| Vercel | Hosting of the website and app | Global network; United States | Standard contractual clauses (to confirm) |
| Cloudflare | Domain name service, security, the bot check on sign-in, and forwarding of email sent to Bevyd | Global network | Standard contractual clauses (to confirm) |
| Resend | Sign-in and account emails (confirm your email, reset your password), and the reminder emails a host sends to guests who have not replied (the guest’s first name and email address) | Japan (Tokyo) | EU adequacy decision for Japan |
| Razorpay | Taking payments and issuing refunds. Card details go to Razorpay; Bevyd never sees or stores them | India | Necessary to carry out the payment you ask for (to confirm) |
| PayPal | Taking payments from buyers outside India who choose PayPal (through Razorpay). Bevyd never sees your PayPal login | Global network; United States | Necessary to carry out the payment you ask for (to confirm) |
How long we keep it
- Guest names, phone numbers, emails and dishes are erased 90 days after the event’s last day. The replies’ counts stay so the host’s totals still add up.
- Requests to review a guest’s identity and failed confirmation attempts are removed after 30 days.
- Financial records, such as receipts, are kept for 8 years, because the law requires it.
- If you delete your account, your events, guest lists and profile are deleted; the financial records above are kept.
Your rights
You can ask to see, correct, export or erase your personal data, to object to how we use it, and to complain to your data-protection authority. Hosts can edit and delete from the app; a guest can ask for their details to be erased by writing to hello@bevyd.com. We will answer within the time the law allows.
The early-access list
If you leave your email address on the “Launching soon” page, we keep that address and the time you agreed, and nothing else. We use it only to write to you once when Bevyd opens. Ask us at hello@bevyd.com and we remove it.
Grievance officer
For any complaint about how your data or your account is handled, write to our grievance officer: Harsh Punn, Grievance Officer, hello@bevyd.com, . We acknowledge a complaint within 48 hours and resolve it within 30 days.
Cookies and storage
Bevyd stores what it needs in your browser to keep you signed in and to remember a confirmed guest’s device. It does not use advertising trackers. See also our Terms of service.
Changes
If this policy changes in a way that matters, we will say so on this page and, for hosts, by email.