California data matrix.
The categories of information WarmInvite uses, their purposes and the recipients involved.
Collection and use
The categories below describe the planned product. Retention periods and recipients must be checked against the operating service before launch. Optional sensitive guest answers and private notes are currently cleared seven days after an event; ordinary guest contact and response data are scheduled for removal after 30 days, subject to lawful exceptions.
On a narrow screen, scroll the table sideways to read all columns.
| Category | Examples | Source and purpose | Operational recipients | Retention and sale or sharing |
|---|---|---|---|---|
| A · Identifiers | Host and guest names, emails, account and guest IDs, necessary session and security data | Hosts, guests, inviting hosts, and browsers; account access, invitations, and safety | Cloudflare; Apple or Stripe when the relevant purchase channel is enabled; authorised staff | Account, event, and security schedules under review; no sale or advertising sharing planned |
| B · Customer records | Necessary billing and contact details; no general request for government IDs or bank credentials | Purchasers and payment workflows; receipts, support, and accounting | Apple or Stripe when the relevant purchase channel is enabled; accounting providers and authorised staff | Required financial-record period; no sale or advertising sharing planned |
| C · Protected classifications | Not requested for profiling; voluntary event content may reveal a protected characteristic | Guest or host free text; meeting event needs without ranking or profiling | Permitted event roles and necessary providers | Event schedule, with earlier removal for optional sensitive answers; no advertising sharing planned |
| D · Commercial information | Purchases, event credits, transactions, and refunds | Purchases and service use; entitlements, refunds, and accounting | Apple or Stripe when the relevant purchase channel is enabled; accounting providers and Cloudflare | Necessary entitlement and financial-record periods; no sale or advertising sharing planned |
| E · Biometrics | No biometric identification or face-recognition system planned | Not intentionally collected for biometric processing | None for biometric processing | Not applicable to the planned service |
| F · Network activity | Necessary usage, browser metadata and security signals; separately chosen optional step reports with daily network/report hashes; no private-invitation session replay planned | Browsers and apps; reliability, abuse prevention, and basic product operation | Cloudflare and approved operational providers | Minimised operational and security schedules under review; no advertising sharing planned |
| G · Geolocation | Host-entered event venue or address; no continuous device GPS collection planned | Hosts; venue display and arrival guidance | Permitted guests and necessary service providers | Event schedule with restricted address visibility; no location advertising planned |
| H · Content | Invitation images and wording, guest answers, optional structured host feedback, and support messages | Hosts, guests, and support requesters; event presentation and support | Permitted event roles and approved providers; minimised host-requested content for optional AI | Event or support schedule; no sale or model-training use planned |
| I · Professional information | Optional host organisation, role, or brand details | Hosts; organiser identity when the host chooses to provide it | Guests when published by the host; necessary service providers | Account or event schedule; no advertising sharing planned |
| J · Education information | No dedicated collection planned; free text could incidentally contain it | Not requested as a separate field; incidental event content only | Permitted event roles if included in content | Applicable event schedule; no advertising sharing planned |
| K · Inferences | Limited host design preferences or optional collection suggestions; no guest social scoring planned | Host choices and host-requested AI design assistance | WarmInvite and the approved, minimised inference route | Host design schedule under review; no cross-context advertising profile planned |
| Sensitive information | Authentication secrets, optional dietary or accessibility answers, and potentially private event location | Account security, guest-provided event needs, and host-provided venue details | Restricted event roles and essential providers; guest answers excluded from AI | Purpose-specific periods, including seven days after an event for optional sensitive answers; no sale or advertising sharing planned |
Sale and advertising sharing
The planned service does not sell personal information or share it for cross-context behavioural advertising. Operational disclosures to contracted providers still occur. If actual practice changes, this notice and applicable choice controls must change first.
Choices and requests
Applicable California rights may include knowing, correction, deletion, portability, and limiting use of sensitive information. The privacy choices centre lists available controls, checks whether this browser sent Global Privacy Control, and will show the email-verified request form when a staffed reply channel opens. WarmInvite currently has no sale or cross-context advertising sharing to turn off. We will assess whether California statutes apply to the Sansa group as a whole before launch.