Tenant Data Use Agreement

1. Purpose limitation

The Service is designed solely to help Tenants manage guest invitations, RSVPs, seating, dietary coordination for catering, transactional notifications, exports for event operations, door prizes (where enabled), and check-in for events hosted on the platform.

You agree that personal information collected through the Service — including guest names, companies, contact details, RSVP answers, seating, dietary information, and check-in records — will not be used for any purpose other than managing those events and related logistics for which the application was designed.

2. No sale; no marketing use

You must not sell, rent, trade, or otherwise commercialize personal information obtained through the Service. You must not use that information for advertising, prospecting, or marketing unrelated to the specific event(s) managed in the Service.

Transactional messages about the event (confirmations, reminders, check-in instructions) are allowed only where permitted by law and, for SMS, where the guest has consented in the product.

3. Lawful collection and notices

You are responsible for ensuring you have a lawful basis to invite individuals and to collect their information; for providing any notices required by privacy or anti-spam law; and for configuring accurate invitation, SMS consent, and dietary disclaimer wording for your events.

4. Access control within your organization

You will grant teammate access only as needed (least privilege), and you will not circumvent role restrictions to expose contact or dietary data more broadly than the product allows. Check-in and similar limited roles must not be used as a workaround to export or misuse restricted fields.

5. Security and exports

You will protect exported files (guest lookups, table sheets, dietary lists, tent cards, and similar) with appropriate safeguards, share them only with people who need them for the event, and securely dispose of them when no longer needed.

6. Retention and deletion

When an event’s purpose is complete, you will use available product controls (or contact the Provider) to archive, delete, or otherwise stop retaining guest personal information except where retention is required by law or a documented dispute. You remain responsible for responding to access, correction, and deletion requests from individuals regarding data you collected as Tenant.

7. Provider role

Provider processes Tenant and guest data to operate the Service and does not sell personal information or use it for marketing. Provider may access Tenant data for support, security, abuse prevention, and legal compliance, with audit logging where applicable.

8. Breach notification

If you become aware of unauthorized access to or misuse of personal information from the Service, you will promptly notify the Provider and cooperate on investigation and any required notices to individuals or regulators.

9. Survival

Sections on purpose limitation, no sale / no marketing, exports, retention, and breach cooperation survive termination for as long as you retain personal information obtained through the Service.