Privacy Policy

Save The Moment (“we”, “us”) designs digital invitations with RSVP tracking. We respect your privacy and your guests’ privacy, and we process personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). This policy explains what we collect, why, who we share it with, and your rights.

Who is responsible for your information

Save The Moment is the personal information controller for this website. For any privacy question or request, contact our Data Protection Officer: email support@savethemoment.shop.

What we collect

When you create an account or place an order

• Your name, email address and password (passwords are stored encrypted), or your name and email from Google if you sign in with Google.
• Contact details you give us, such as your phone number.
• Event details for your invitation: names, dates, times, venues, map links, dress code, gift guide, music, messages, and the photos you upload.
• Payment proofs you upload (a Maya or bank transfer screenshot or PDF) and the reference number.

When your guests RSVP

• Their name, whether they are attending, the number of plus-ones, meal choice, song request and any message they leave.

Automatically

A cookie keeps you logged in, and the RSVP form uses a short-lived token to stop spam. We do not use advertising or tracking cookies. Our service providers keep standard technical logs (such as IP address and browser type) to run and secure the service.

Why we use it

• To design, publish and update your invitation, and to show it to the guests you share it with (to fulfil our agreement with you).
• To collect your guests’ replies and show them on your dashboard and in your guest-list sheet.
• To verify your payments and manage your order.
• To email you about your order: payment confirmations, your draft, and your share link.
• To keep the service secure, prevent abuse, and meet our legal and accounting obligations.

We do not sell personal information, and we do not use your photos or event details in our marketing without your written permission.

Who can see it

• Your published invitation can be opened by anyone with its link, including the event details and photos on it. Share the link only with the people you invite.
• Guest replies are visible only to you and our studio team, on your dashboard and in a Google Sheet in our Google Drive that is shared with your email address.
• Payment proofs are stored privately and seen only by you and our studio team.
• Service providers who process information for us under agreements that protect it: Supabase (database, login and file storage; its servers are in Australia), Google (sign-in with Google, Google Sheets and email), our email delivery provider, and our website host. Some of these providers store information outside the Philippines; we use providers that keep it secure and confidential as the Data Privacy Act requires.
• Government authorities, only when the law requires it.

How long we keep it

• Your account stays until you ask us to close it.
• Order and payment records are kept for as long as Philippine tax and accounting rules require.
• Your invitation is online from 2 months before your event until the day after. We keep the invitation details and guest replies for up to 12 months after your event so you can look back on them, then delete them. You can ask us to delete them sooner.
• Payment proof images are deleted once your order is complete and they are no longer needed for our records.

Your rights

Under the Data Privacy Act you and your guests have the right to:

• be informed about how your personal information is processed;
• access your personal information and get a copy of it;
• correct inaccurate or outdated information;
• object to processing, and have your information blocked or erased;
• receive your information in a commonly used format (data portability);
• be paid damages for harm caused by inaccurate or unlawfully used information; and
• file a complaint with the National Privacy Commission (privacy.gov.ph).

To use any of these rights, email support@savethemoment.shop. We reply within 15 days. Guests can also ask the host, or us directly, to remove their RSVP.

How we protect it

Your information is protected by encrypted connections, access limited to your own account and to our studio team, row-level security in our database, and private storage for payment proofs. If a personal data breach ever puts you at risk, we will notify you and the National Privacy Commission as the law requires.

Children

Accounts are for adults (18 and over). Details about children in birthday or baptism invitations are provided by their parent or guardian.

Changes to this policy

If we change this policy, we will update the date at the top of this page and, for important changes, email our clients.

Contact us

Questions or requests about your personal information: email support@savethemoment.shop.