Privacy Policy

Last updated: July 12, 2026

DocuDome ("we", "us", "our") operates the DocuDome products at docudome.studio — the Welcome Guide app, Invite Studio, Printable Studio, and related tools (the "Service"). This policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to this policy.

1. Who this applies to

The Service has two kinds of users:

• Hosts — people who create an account and build welcome guides, invitations, or printables.
• Guests — people who open a link a host shares. Guests do not need an account to view a guide or invitation. If a host enables it, a guest may choose to submit information — for example, an RSVP, a photo to a shared album, or a message on an event wall.

2. Information we collect

• Account information. When a host signs in with Google or an email sign-in link, we receive and store an email address (and, for Google sign-in, basic profile information Google provides, such as name). We do not receive your Google password.
• Guide and invitation content. The information a host enters — such as a property or event name, address or venue, dates and times, check-in or event instructions, Wi-Fi details, access codes, contact preferences, messages, and any images the host uploads. Hosts choose what to include.
• Guest-submitted information. Where a host enables the feature, we collect what guests choose to provide: an RSVP (typically a name, response, and optional message), photos uploaded to a shared album, and message-wall posts (a display name/handle, which may be "Anonymous", and the message text). Message-wall posts are moderated according to the host's settings before appearing.
• Payment information. Paid features are processed by Stripe. We receive confirmation of payment and limited billing metadata (such as a customer/subscription reference), but not your full card number.
• Technical data. We store a sign-in session in your browser's local storage to keep you logged in. Standard server logs (e.g., IP address, request time) may be processed by our hosting and infrastructure providers for security and reliability. Optional analytics cookies are used only with your consent (see "Cookies and analytics" below).

We do not sell your personal information, and we do not use it for advertising.

3. How we use information

• To provide the Service — authenticate hosts, save and display guides and invitations, serve links to guests, and collect RSVPs, album photos, and wall messages you enable.
• To process payments and manage subscriptions.
• To maintain security, moderate abuse, prevent misuse, and operate and improve the Service.
• To communicate with you about your account or important changes to the Service.

4. Legal bases (EU/UK)

If you are in the EU or UK, we process personal data on these bases: performance of a contract (to provide the features you use), legitimate interests (to keep the Service secure, prevent abuse, and improve it), consent (for optional analytics cookies, which you can withdraw at any time), and legal obligation (for example, tax records for payments).

5. Cookies and analytics

Essential storage (such as your sign-in session) is always used because the Service cannot work without it. Optional analytics cookies (Google Analytics) load only after you accept them via the cookie banner. If you decline, no analytics cookies are set. You can change your choice at any time — decline in the banner, or clear the "dd_cookie_consent" value in your browser to be asked again. We do not use advertising cookies unless and until a separate consent is added for them.

6. Service providers

We rely on trusted third parties to run the Service. They process data on our behalf:

• Supabase — database, authentication, and storage of account, guide, and invitation data (including RSVPs, album photos, and wall messages).
• Stripe — payment processing for paid features.
• Google — optional "Sign in with Google" authentication, and, with your consent, Google Analytics.
• Netlify — website hosting and content delivery.
• Listing fetch. When a host chooses to auto-fill from a listing URL, our server retrieves that public listing page at the host's request.

DocuDome's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request only the basic profile and email needed to sign you in, and we do not use this data for advertising or sell it to third parties.

7. Sharing of guide and invitation links

A published guide or invitation is accessible to anyone who has its link. Hosts control who they share a link with, and can delete a guide or invitation at any time, which disables its link. Hosts should avoid including sensitive information they do not wish to share, and should rotate access codes between guests as a best practice.

8. Data retention

We retain account, guide, and invitation data (including RSVPs) for as long as a host's account or item is active. Guest photo albums and message walls automatically expire (by default around 90 days after the event) and are swept from storage after that. Hosts can delete individual guides, invitations, photos, or messages at any time. To delete your account and all associated data, contact us at the address below.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent (such as for analytics cookies). You can manage and delete your own content from the dashboard, or contact us to exercise any of these rights. We will respond within a reasonable time. EU/UK users may also lodge a complaint with their local data-protection authority.

10. Security

We use industry-standard measures, including HTTPS encryption in transit and database-level access controls (row-level security), to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data.

11. Children

The Service is intended for adults and is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from them. Some occasions (such as a child's birthday or a baby shower) are hosted by adults; for those occasions the anonymous message wall is disabled. Hosts and guests should not upload images or information about a child without the consent of that child's parent or guardian. If you believe a child has provided us personal information, contact us and we will delete it.

12. International users and data transfers

We currently process and store data on infrastructure located in the United States (our database, storage, and hosting providers). If you use the Service from the EU, UK, or elsewhere, your information is transferred to and processed in the United States. Where required, we rely on appropriate safeguards for such transfers (such as the EU Standard Contractual Clauses and our providers' data-transfer frameworks). We do not currently guarantee EU/EEA data residency; if that changes we will update this policy.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date. Significant changes may be communicated to account holders.

14. Contact us

Questions or requests about this policy or your data: docudome@pm.me.