Your data in plain words: what Tov keeps, who sees it, exporting and deleting

This guide summarizes, in everyday language, what Tov does with your data today. The reference text is the privacy policy, linked at the end of this guide: if the two differ, the policy prevails. Tov never sells your data.

1What Tov records

• Your account: name, email address, password (stored hashed, so unreadable), profile photo if you sign in with Google, language, time zone and username, which appears in the address of your invitations.
• Your sign-in sessions: the IP address and browser of each open session, shown in your settings so that you can close them. A session lasts 30 days.
• Your events: title, date, place, description, moments, uploaded photos and, if you fill them in, your family memory (relatives, yahrzeit dates).
• Your guests, as you enter them: name, Hebrew name, phone number, email, notes, language.
• Their replies: attendance, number of people, children, companions, message. If the form asks for them, a guest can also give a kosher diet and allergies: these are sensitive data (religious beliefs, health), entered voluntarily to organize the meal. Tov does not record guests’ IP addresses with their reply.
• The count of invitation opens: Tov counts internally that an invitation was opened, without a cookie, so that you can see it has been read. This count is sent to no third party.
• Logs: emails sent (recipient’s domain only), bounce messages and the waiting list.

2Who sees it, and where it is

You, your collaborators according to their role, and each household for its own link. To run the service, Tov relies on providers: Cloudflare (hosting, photos, anti-bot protection), Neon (database, in the European Union, in Frankfurt), Resend (service emails, to you and your collaborators only: never to your guests), Inngest (scheduled tasks), Google (sign-in, contact import, address entry, and Google Analytics with your consent), PostHog and Sentry (with your consent), UptimeRobot (site availability) and Hostinger (the [email protected] mailbox).

Some of these providers may process data outside the European Union: Google Analytics is one example. For technical support, the Tov team can also temporarily open an organizer’s space, for two hours.

3Cookies and audience measurement

Without your consent, Tov uses only essential cookies (your sign-in) and your browser’s local storage to remember your choices (for example, the language). Audience measurement (Google Analytics, PostHog, Sentry in the browser) runs only with your consent, and never on invitations, in the organizer space, on sign-in, on drafts or on collaboration pages. No advertising cookie is used. You can review your choice at any time with “Review my cookie choices” in “Privacy”.

4Exporting your data

In settings, in the “Privacy” section, “Download my data (JSON)” downloads a file with your profile and, for the events you own, your guests, their replies, gifts, budget and campaigns, without the photo files. It does not contain everything yet: for example, not the per-moment reply details or the family memory.

An event’s replies can also be exported as a CSV file, from the tracking screen: see the guide on tracking replies.

5Deleting an event, or your account

1. 1

   Step 1

   Deleting an event

   “Delete this event” erases its page, its moments, its guests and their replies, immediately. Only the owner can do this. Uploaded photo files are not yet erased automatically: write to us to ask for their deletion.

2. 2

   Step 2

   Deleting your account

   In settings, “Delete my account” asks for your password, then Tov sends you a confirmation email, valid for 1 hour. As soon as you tap the link, the account, its events, its guests and their replies are erased, with no grace period.

After an account is deleted, the following remain: feedback messages (without your identity), the count of invitation opens (pseudonymized), the email log (domain only), the waiting list, the photo files and the technical history of the database, which makes it possible to restore the last six hours.

6For how long?

You can ask for access to your data, its correction, its deletion, its portability, or object to its processing by writing to the team. If you are a guest, you can contact the event’s organizer or Tov.