Privacy Policy
Last updated: 2026-06-27
Introduction
Tashrifuna (تشرفونا) is a bilingual event-invitation and QR check-in platform. This policy explains what information we collect, how we use it, who we share it with, and the choices available to event owners (“customers”), their check-in staff, and their guests.
Information We Collect
Account information
When you register as a customer, we collect your name, email address, and phone number, and we store your account status and language preference.
Event information
Event owners provide event details such as the event name, date, time, venue, and related settings.
Guest information
Event owners may upload or enter guest names and phone numbers to send invitations and manage RSVPs. Guests do not create accounts; their information is provided by the event owner or, for RSVP responses, by the guest themselves using a private invitation link.
RSVP responses
When a guest responds to an invitation, we record their attendance choice and the number of companions, associated with their unique invitation link.
QR invitations and check-in
Each guest receives a unique, randomly generated check-in code used to generate their QR entry pass. When a guest is scanned at an event, we record the check-in time and who performed the scan (the event owner or assigned check-in staff).
WhatsApp invitation delivery
Where enabled, invitations may be sent to a guest's WhatsApp number through Meta's WhatsApp Business Platform using a pre-approved message template. We receive delivery-status information from Meta (such as sent, delivered, read, or failed) for messages we send.
Technical, security, and diagnostic logs
Like most web platforms, our hosting and infrastructure providers automatically generate technical logs (such as request timestamps, error details, and abbreviated/masked identifiers) to operate the service, diagnose problems, and help prevent abuse. We do not log full payment details, and we take care not to log full phone numbers or access credentials in these diagnostic logs.
How We Use Information
We use the information described above to: create and manage customer accounts; let event owners create and manage events; deliver invitations and collect RSVP responses; generate and validate QR check-in passes; operate the check-in process at events; communicate service-related information; maintain the security, integrity, and reliability of the platform; and comply with applicable legal obligations.
Service Providers
We use the following third-party service providers to operate Tashrifuna. Each provider processes information only as needed to provide its service to us.
- Supabase — database hosting, authentication, and backend infrastructure.
- Vercel — application hosting and content delivery.
- Meta / WhatsApp Business Platform — delivery of WhatsApp invitation messages, where enabled.
- Our email service provider — delivery of account-related emails such as password resets, where configured.
We do not control these providers' own privacy practices beyond our configuration of their services; please refer to each provider's own privacy documentation for details about how they process information on our behalf.
Data Retention
We retain account, event, guest, RSVP, and check-in information for as long as the related customer account remains active and as needed to operate the service. We may retain certain information for a limited additional period after a deletion request to address security, fraud-prevention, legal, or operational needs, as described in our Data Deletion page.
Security Practices
We apply access controls at both the application and database level so that customers can only access their own events and guests, and so that check-in staff can only access events they are assigned to. Administrative access to the platform is limited to authorized platform administrators. No method of storing or transmitting information is completely secure, and we cannot guarantee absolute security.
Your Rights and Choices
Depending on your role and applicable law, you may have the right to access, correct, or request deletion of your information. See our Data Deletion page for how to make a request. Event owners are responsible for the accuracy of guest information they upload and for having an appropriate basis to invite and contact their guests.
We Do Not Sell Personal Information
We do not sell personal information to third parties.
Children
Tashrifuna is intended for use by adults creating and managing events. We do not knowingly collect account information from children.
Changes to This Policy
We may update this policy from time to time. The “Last updated” date above reflects the most recent revision.
Contact Us
If you have questions about this policy or how your information is handled, contact us at: