Last updated: 2026-08-02
ahvaan is an event-invitation tool: a host creates an event page, invites guests with personal links, and collects their RSVPs. This page explains what information we collect and why.
Hosts. When you sign up, we store your email address and an encrypted password (via Supabase Auth — we never see your password in plain text). Everything you enter about an event (title, date, venue, description, theme, custom page content, form questions) is stored so we can render your event page and dashboard.
Guests.When a host creates an invite, we store the name (and, if the host adds it, an email address) they gave you. When a guest submits an RSVP, we store whatever answers the form asks for — typically a name, attendance, and any custom questions the host added. If a host turns on email verification for an event, we temporarily store the email address a guest enters and a one-time verification code sent to it — the code expires shortly after it’s issued, whether or not it’s used.
We do notrun advertising or analytics trackers, sell or share data with data brokers, or collect information beyond what’s described above.
Solely to run the product: authenticating hosts, rendering event and RSVP pages, sending invite/reminder emails a host asks us to send (via Resend), and showing hosts their own guest list and responses. A host can see and manage the guests and RSVPs for their own events; they cannot see other hosts’ events or guests.
All data is stored in a Supabase (PostgreSQL) database. Emails are sent through Resend. Neither is used for any purpose beyond operating ahvaan on our behalf.
We use one cookie to keep a host signed in (an authentication session cookie). Guests never need an account, and a guest who RSVPs via a personal invite link is never cookied — the link itself identifies them. If a host turns on email verification for an event that doesn’t require invite links, a guest who verifies their email is given one additional cookie for that event, so they aren’t asked to re-verify on a later visit; it expires automatically and can be cleared at any time from that event’s page. We don’t use tracking or advertising cookies.
A host can edit or delete any event, which deletes its invites and RSVPs with it. A guest who wants their information removed or corrected can ask the host who invited them (hosts can edit or delete any RSVP), or contact us directly and we’ll help.
If this policy changes in a material way, we’ll update the date above and, where practical, let signed-in hosts know.
Questions about this policy, or a request about your data — email support@ahvaan.tejanarra.space.