Privacy Policy
Overview
This policy explains what personal data the MyIrua service collects, why, and what your rights are. The operator and controller for service-user data is Adkeyz Technologies LTD, 17 Abba Hillel Silver St., Netanya, Israel. The policy is subject to the Israeli Privacy Protection Law, 1981 and, for EU users, the GDPR.
Hosts and guests — two roles
For registered users (hosts) we are the data controller. For guest data a host enters or collects (names, phone numbers, RSVPs, meal preferences) the host is the controller and we process it solely on the host’s behalf. Guests wishing to access, correct or delete their details should contact the event host first; we assist hosts in honouring such requests.
What we collect
Account details (name, email, phone), content you upload (invitations, images, guest lists and guest responses), transaction-level payment data (amount, plan — card details are held only by the payment provider), technical usage data (IP address, browser, pages) and logs required for security and operations.
Purposes
Operating the service and providing its features; sending event messages to guests on the host’s behalf; billing; support; security and fraud prevention; improving the product through aggregate usage analytics; and meeting legal obligations. We do not sell personal data.
Subprocessors
The service relies on established infrastructure vendors processing data for us, including: Supabase (database and storage), Cloudflare (hosting and CDN), the payment provider (Paddle or PayPal), Twilio (SMS/WhatsApp), Resend and Brevo (email), Sentry and Axiom (error monitoring and logs), PostHog (analytics), Upstash (rate limiting) and Cloudflare Turnstile (bot protection). Some vendors process data outside Israel/the EU, subject to customary contractual safeguards.
Retention and deletion
Data is kept while the account is active and as needed for the purposes above. Data of past events is deleted or anonymised under an automated retention policy; billing records are kept as required by law. Deleting an account removes personal data subject to legal exceptions.
Your rights
Subject to applicable law, you may access, correct, delete, restrict processing of, and port your data, and you may lodge a complaint with the competent supervisory authority. Contact: support@myirua.com.
Cookies
We use essential cookies (authentication, security, language and display preferences) and product analytics. We do not use third-party advertising cookies.
Security
Data is encrypted in transit, access is permission-scoped, and accounts are fully isolated from one another (row-level security). No system is perfectly secure; we will notify material security incidents as required by law.
Children and updates
The service is intended for users aged 18+. Policy updates are posted on this page with a revision date; material changes will be notified.