Privacy Policy

The data controller is the provider of teasteptam.ro, identified in the Terms and Conditions. Contact email: contact@teasteptam.ro.

Account data: name, email address, encrypted password.

Event data: information about the event (date, venue, type), invitation content (texts, music).

Guest data: the names and contact details of the guests you upload (email, phone), plus their RSVP replies.

Payment data: we do not store card data. Payments are processed by Stripe, which holds its own PCI DSS certification.

Technical data: IP address, browser type, pages visited — for security and to improve the service.

Optional analytics: only after analytics consent, we send Google Analytics public-page visits and sign-up, checkout-start and purchase events. We use generic product names, value, currency and an opaque transaction identifier; we do not include couples' names, emails, RSVP answers or private token links.

• Performance of the contract — to provide you with the digital invitation service
• Legitimate interest — platform security, fraud prevention, improving features
• Analytics consent — optional measurement of visits and conversions through Google Analytics; this is separate from newsletter consent and can be changed through Cookie settings
• Consent — marketing communications (newsletter), if you explicitly subscribed; you choose offers and blog articles separately. To send you relevant offers (for example a reward for returning customers) we also use your purchase history: how many purchases and the dates of the first and latest one
• Legal obligation — keeping financial records as required by Romanian law

Account data is kept for as long as the account exists + 30 days after deletion. After an account is deleted we keep only a minimal record (name, email, phone, sign-up and deletion dates, number of invitations and payments) for our customer history and possible disputes, for 3 years; the contact details are then erased. Billing data is kept for 10 years under Romanian tax law. Guest data is deleted 90 days after the invitation expires, unless you delete it sooner.

• Right of access — you can request a copy of your data
• Right to rectification — you can correct inaccurate data directly from your account
• Right to erasure — you can delete your account and data at any time from Dashboard → My account → Delete account (we only keep billing records, which the law requires, and the minimal record described in section 4)
• Right to portability — you can export your data in JSON/CSV format
• Right to object — you can withdraw consent for marketing at any time

To exercise your rights, contact contact@teasteptam.ro. We reply within 30 days at most.

We work with the following service providers:

• Stripe — payment processing (USA, Privacy Shield)
• Resend — transactional email delivery and, only if you subscribed, the newsletter (offers and/or blog articles)
• Vercel — infrastructure hosting (EU/USA)
• Google Analytics — optional visit and conversion measurement after analytics consent; personalised advertising is not enabled

We do not sell or rent your data to anyone.

All communications are encrypted via HTTPS/TLS. Passwords are stored with bcrypt. Access to data is strictly limited to authorised staff.

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.