Privacy Policy

Festia is an invitation platform that lets you create shareable event pages for anniversaries, birthdays, weddings and other celebrations. It is built and operated by Muhammad Hamza Maqsood, based in Pakistan ("we", "us"). This policy explains what information we collect, why, and what we do with it.

• Account details. Your name, email address and password. Passwords are stored only as a cryptographic hash — we never see or store them in plain text. If you sign in with Google, Google shares your name, email address, profile picture and Google account ID with us instead of a password.
• Event content. Whatever you put on your invitation pages: titles, descriptions, dates, venues, host and honoree names, photos, and music you upload.
• Guest submissions. When someone visits an invitation page they can RSVP (name, optional email, headcount, note), sign the guestbook (name, message) and leave reactions — without creating an account. This information is collected on behalf of the event host, who can see and manage it.

• Session cookie. When you log in we set a single essential cookie (festia_session) to keep you signed in for up to 30 days. It is httpOnly and is not used for tracking. We do not use advertising or analytics cookies.
• View counts. We keep an aggregate count of how many times each invitation page is viewed. We do not build profiles of individual visitors.
• Server logs. Our hosting provider records standard technical logs (such as IP address and request time) to operate and secure the service.

We use your information only to run Festia:

• to create and display your invitation pages and collect RSVPs;
• to send transactional emails — email verification and password reset links. We do not send marketing emails;
• to keep the service secure and prevent abuse.

We do not sell your information, show ads, or share your data with anyone except the service providers listed below.

If you use the "Write with AI" feature, the event details you have typed (such as the title, hosts, honoree names, date, venue and chosen tone) are sent to Google's Gemini API to draft invitation text. This happens only when you press the button — nothing is sent to the AI service otherwise.

Festia runs on trusted infrastructure providers, each of which receives only what it needs to do its job:

• Vercel — hosting, and storage of uploaded photos and music;
• Supabase — our database;
• Google — optional Google sign-in, the Gemini AI writing feature, and maps on the venue picker;
• Email delivery provider — sending verification and password-reset emails.

These providers may process data on servers outside your country (including the United States and Europe).

Invitation pages are designed to be shared: anyone with the link can view the page, including uploaded photos and music, and guestbook messages that appear on it. Please keep that in mind before publishing anything sensitive. RSVP details are visible to the event host.

We keep your information for as long as your account is active. Deleting an event also deletes its RSVPs, guestbook entries and reactions. Expired verification and password-reset tokens are cleaned up automatically. To delete your account and its data entirely, email us at hamzamaqsood072000@gmail.com and we will take care of it.

Passwords are hashed, session cookies are httpOnly, and one-time tokens are stored hashed and expire after use. No online service can guarantee perfect security, but we work to protect your data with industry-standard practices.

Festia is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

You can access and update your account details at any time, and you can ask us to correct, export or delete your personal information by emailing hamzamaqsood072000@gmail.com.

If we make meaningful changes to this policy, we will update the date at the top of this page. Continued use of Festia after a change means you accept the updated policy.

Questions about privacy? Email hamzamaqsood072000@gmail.com.