1. Hosts and guests are in different positions
This comes first because it decides who you ask for what.
- If you’re a host, you created the account and set up the event. Your account information is between you and us, so come to us directly.
- If you’re a guest, your name is on someone else’s seating plan. The host gave us your details, not you.They chose what to collect and why. We just hold it so their event works. Requests about a guest list are usually quickest through the host, though you can always come to us and we’ll help.
2. What we collect
From hosts
- Your account. Name, email, password (scrambled, never readable), and your phone number and company if you add them.
- Your events. Event name, date, timezone, venue, schedule, and any logo, menu or floor plan you upload.
- Billing.Which plan or tier you bought and when. Card numbers go straight to Stripe and never reach us. We only keep Stripe’s reference for your customer and subscription.
- Technical bits. IP address, browser, pages visited, error reports. Used to keep things secure and working.
About guests, given to us by the host
- Name, and phone number or email if the host adds them
- Party size, table, and RSVP answer
- Dietary requirements and allergieson tiers that include them. This can say something about someone’s health or religion, which the PDPA treats as sensitive, so it deserves extra care from whoever uploads it.
- Whether they arrived, and when they checked in
- Any photo a guest uploads, plus an anonymous token so that guest can delete their own upload
A guest looking up their seat doesn’t create an account. We don’t ask them for anything beyond the name they type to search.
3. Why we use it
- To run your account and let you sign in
- To make the thing work: showing a guest their table, taking an RSVP, recording a check-in, displaying the gallery
- To take payment, through Stripe
- To send the email you’d expect: invitations you trigger, password resets, billing notices
- To keep the service secure and stop abuse
- To meet our legal, tax and accounting obligations
We don’t sell personal information, and we don’t sell or rent guest lists. We never use your guests’ contact details to market Guestluxify to them.
4. Who sees it
Only the people and companies who need to:
- The host of your event, and any team members they invite, who can see that event’s guest list.
- Other guests, but only in the narrow ways the host allows. A seat search shows a name and a table, never a phone number or email. Gallery photos are visible to anyone with the event link.
- Companies that help us run it. Hosting and database, file storage, email, payments (Stripe), and error monitoring. Some are outside Malaysia, and we take reasonable steps to make sure they protect it properly.
- Authorities, where the law requires it or someone’s safety is at stake.
5. How long we keep it
- Photos and videos. One month after the event date on Silver and Gold, then deleted for good. Download what you want to keep before then.
- Events and guest lists.For as long as the event is in your account. Delete an event or a guest and it’s gone.
- Your account.For as long as it’s open. Closing it deletes your events, guest lists and photos.
- Billing records. As long as tax and accounting law says we have to, even after an account closes.
Deleting is permanent and we can’t undo it. Backups age out on their own cycle.
6. Your rights
Under the PDPA you can ask us to:
- give you a copy of what we hold about you
- fix anything wrong or out of date
- stop doing something with it that’s causing you harm or distress
- stop using your details for marketing
- delete it, where we’re not required to keep it
Email guestluxify@gmail.comand we’ll get back to you within the time the PDPA allows. We may need to check who you are first. If it’s about a guest list, we’ll usually need to loop in the host who uploaded it, since it’s their information.
7. If you’re a host, this part is on you
Uploading a guest list means handling other people’s personal information. That makes you responsible for:
- having a proper reason to collect their details and share them with us
- letting your guests know their information is being used to seat them, and that an event page exists
- being careful with dietary and allergy notes, which can reveal health or religious beliefs
- passing on any request a guest makes to see, correct or delete their details. You can do all three from your dashboard.
- deciding whether guest photos need your approval first, and moderating what gets through
8. Keeping it safe
Information is encrypted while it travels. Passwords are scrambled, not stored. A guest list is only reachable by the host and the team members they invite, enforced in the database itself rather than just hidden in the interface. Uploaded files are stored privately and served through short-lived links, not public URLs. Card details never touch our servers.
No system is perfectly secure. If a breach affects your information, we’ll act quickly and tell you and the authorities where we’re required to.
9. Cookies
We use the cookies the site needs to work, mainly keeping you signed in and protecting forms from abuse. No advertising cookies, and we don’t sell data to ad networks. Blocking the essential ones will stop sign-in from working.
10. Children
Guestluxify isn’t aimed at children. Guests of any age can appear on a seating plan or in a photo, because families come to events. That information is uploaded by the host, who is responsible for handling it properly. If you think a child’s details are on our systems and shouldn’t be, tell us and we’ll remove them.
11. Changes
We may update this page at any time. The date at the top shows when it last changed.
12. Getting in touch
Questions, or want to use one of the rights above? Email guestluxify@gmail.comand we’ll help. See also our Terms of Service.