Privacy Policy

Effective date: July 14, 2026

RSVPoll is operated by Development Leverage Consulting LLC, a California limited liability company ("DevLev", "we", "us"). This policy explains what information we collect when you use rsvpoll.com (the "Service"), how we use it, and the choices you have.

The short version: we collect only what the Service needs to work, we don't show ads, we don't sell your data, and we don't track you across other sites.

1. Information we collect

If you create an account, we collect:

• Your email address and, optionally, your name;
• Your password, which is transmitted over an encrypted connection and stored only as a salted cryptographic hash — we never store it in plaintext;
• The events and polls you create (titles, descriptions, dates, options);
• Sign-in records for your active sessions, including the IP address and browser (user agent) used, so you can review and revoke sessions from your account settings.

If you respond to an event or poll (no account needed), we collect:

• The display name you enter;
• Your responses (for example, yes/no/maybe for each time option);
• A random identifier stored in your browser so you can return and edit your responses. This identifier is not tied to your identity and is not used for tracking.

From everyone, our servers automatically record standard technical logs (IP address, browser type, pages requested) used for security, abuse prevention, and debugging.

2. How we use your information

We use the information above only to operate the Service:

• Showing events and polls to the people they're shared with, and tallying responses;
• Signing you in and keeping your account secure;
• Sending transactional email — account verification, password resets, and email-change confirmations. We don't send marketing email today; if we ever do (for example, news about a paid plan), every message will include an unsubscribe link and you can opt out at any time;
• Preventing abuse (for example, rate-limiting and blocking malicious traffic);
• Debugging problems with the Service.

3. What we don't do

• We do not sell your personal information, and never will;
• We do not show ads;
• We do not use advertising or cross-site tracking cookies;
• We do not share your data with third parties for their own purposes.

4. Who can see your information

Anyone with an event or poll link can see that page — including the event's title and description, and every participant's display name and responses. Share links are unlisted (they use long random tokens and public response pages are excluded from search-engine indexing), but they are not password-protected: whoever has the link can view the page. Use a nickname when responding if you prefer not to show your real name.

Your email address is never shown to other users. Event and poll creators see participants' display names and responses, not anything else about them.

DevLev administrators can access the data described in this policy, but only as needed to operate the Service — for example, to provide support, investigate abuse, or debug a problem.

We disclose information to third parties only if required by law (for example, a valid subpoena) or as needed to protect the Service and its users from abuse.

5. Cookies and local storage

We use one essential cookie, which keeps you signed in to your account. It is not used for tracking and we set no third-party cookies.

If you respond to an event or poll, we store your display name and a random identifier in your browser's local storage so you can return and edit your responses. You can clear this at any time through your browser settings.

6. Service providers

We keep the infrastructure footprint small:

• Hosting: the Service runs on servers provided by Linode (Akamai) in the United States. All application data is stored there. Backups are encrypted on our servers before being stored on a separate Linode server, also in the United States — the backup storage only ever holds encrypted data.
• Email: transactional email is sent through mail servers operated by DevLev, not a third-party email service.
• Fonts: pages currently load fonts from Google Fonts, which means your browser sends your IP address to Google when a page loads. Google does not receive any other information about you from us.

If we add sign-in via third-party providers (such as Apple or Google) in the future, and you choose to use it, we would receive your name and email address from that provider; we will update this policy before launching any such feature.

7. Data retention and deletion

• Your account data, events, polls, and their responses are kept until you delete them. Deleting an event or poll deletes its responses; deleting your account permanently deletes your account data and everything you created. Deletion is immediate and not recoverable.
• Responses you submit to someone else's event or poll are kept until that event or poll (or its creator's account) is deleted. To have a response removed sooner, contact us or the person who shared the link.
• When you delete something (or ask us to), it is removed from our live systems immediately. Encrypted backups are kept on a rolling schedule and are used only for disaster recovery; deleted data ages out of all backups within 12 months.
• Records generated by sending transactional email (such as bounce notices, which contain the recipient's email address) are deleted within 90 days; copies in encrypted mail-server backups age out within 6 months.
• Server and application logs, including IP addresses and mail delivery metadata, are retained for approximately 30 days (rotated system logs up to five weeks) and are excluded from backups.

8. Your rights

Wherever you live, you can:

• Access and correct your account information from your account settings;
• Delete your account and data yourself, from your account settings;
• Export a copy of your data by emailing us at support@rsvpoll.com;
• Ask us anything about how your data is handled, at the same address.

We respond to requests within 30 days.

If you are in the EEA or the UK: DevLev is the data controller. We process your data to provide the Service you request (performance of a contract) and to secure and debug the Service (our legitimate interests). We don't do anything with your data that requires separate consent. The Service is hosted in the United States, so your information is transferred to and processed in the US; we protect it as described in this policy regardless of where you are located. In addition to the rights above, you have the right to object to or restrict processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority.

If you are in California: we do not sell or share your personal information as defined by the CCPA, and we honor the access, deletion, and correction rights described above for everyone.

9. Security

All traffic to the Service is encrypted with TLS. Passwords are stored as salted hashes. Access to production systems is limited to DevLev. No system is perfectly secure, so we can't guarantee absolute security — if we learn of a breach affecting your personal data, we will notify you as required by law.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us at support@rsvpoll.com and we will delete it.

11. Changes to this policy

We may update this policy as the Service evolves. If we make a material change, we will notify you by email or by a notice on the Service before it takes effect. The current version will always be available at rsvpoll.com.

12. Contact

Questions or requests about your data? Email us at support@rsvpoll.com.

Development Leverage Consulting LLC
California, USA