Privacy policy
Last updated Wednesday, 28 October 2026 · version 2
Who we are
Sharrifona is a platform for designing digital wedding and engagement invitations, sharing them and collecting attendance. This policy explains what we collect and why, how long we keep it, and how to ask for it to be deleted.
What we collect
- About the account holder: mobile number, email address, the password stored hashed (we never see it), and the account's language.
- About the invitation: what you write in it — the couple's and hosts' names, the event's date and time, the venue's name and map link, notices, and a music link if any.
- About payment: the order's reference, amount, dates and status, the transfer receipt image you upload, and, if you ask for a refund, the IBAN you write.
- About guests: name, mobile number, the answer (attending or not), an optional message, and when they answered.
- Technical information to run and protect the site: request and error logs that name accounts by id only — never a mobile, an email or a code. We use no advertising or tracking cookies; our cookies only keep you signed in.
Why we collect it
- To create, publish and deliver your invitation to your guests.
- To collect attendance and show the list and counts to you alone.
- To check the bank transfer, publish the invitation once approved, and issue the payment receipt.
- To send only the emails the service needs: verification codes, approval or rejection of an order, and notices about your invitation. We send no marketing.
- To protect the platform from abuse and follow up on faults.
Who sees your guests' data
Guests' names and mobiles are shown to you only, in your invitation's area. The Sharrifona team sees counts only, and opens a guest list only when you ask for support, with a written reason that appears in your invitation's activity. No guest's data appears to anyone else on the invitation's public page.
How long we keep it
- The invitation's link works until 7 days after the event.
- Guests' data (names, mobiles, answers) is deleted 30 days after the link ends; we email you a week before so you can export the list.
- Order records (reference, amount, dates, decision) are kept as a financial record; when an account is deleted they stay without your name or mobile.
- Receipt images are deleted with the account.
- Operational logs: 14 days for ordinary lines, 90 days for warnings and errors.
- Nightly backups keep data for up to 14 days and are then replaced, so what is deleted from the site leaves the backups within 14 days.
Where it is stored
Data is stored on rented servers in the United Kingdom. Emails are sent through a transactional email provider (Resend), only to deliver them.
No selling, no sharing
We do not sell your data or your guests' data, and we do not share it with anyone for marketing. We disclose it only where the law requires us to.
Your rights and deletion
You may ask for a copy of your data, a correction, or the deletion of your account. Deletion is done through support: contact us and we delete your account, invitations, guests' data and receipt images, and keep the orders as a financial record without your personal data.
Contact
For questions or a deletion request: the support WhatsApp number and email shown on the payment page and in your account.
Changes
When this policy changes we publish a new, dated version on this page.