THE DETAILS
Privacy policy
Last updated: October 26, 2026
This policy explains how Honestly Zen handles information in connection with its event planning website and app. It covers visitors, account holders and people who use shared guest pages. To ask a question or make a request, use Contact us and choose Privacy request. Account holders can also use the signed-in Support Center.
Information you provide
When you create or use an account, the service processes information such as your name, email address, account profile, workspace membership, assigned access and account security information. Passwords are handled through the application’s password hashing process. Please keep your password and recovery links private.
Event organizers may enter event details, guest names and contact information, household sizes, invitation and RSVP information, meal choices, seating, schedules, supplier contacts, tasks, budget records, notes, comments and uploaded files. The information collected depends on the features used and the questions the organizer includes. Guests may provide responses, optional names or captions and photos through shared pages.
Contact forms and support requests contain the information you submit so the administrator can review and respond. Please do not include passwords, payment card details, medical records or other information that is unnecessary for the request.
Information generated through use
The service uses account sessions and security information to recognize signed-in users, apply permissions and protect the app. Servers may process request details such as IP address, time, browser information, errors and operational logs. Public contact requests store a hashed IP identifier and submission time to help limit abuse.
Operational records may include account changes, access-code redemption, billing status, delivery attempts and supported planning history. These records help run, support and protect the service. The app’s demo environment is identified separately and is intended for testing rather than storing real event or guest information.
Why information is used
- To create accounts, authenticate users and provide the event planning features you choose.
- To manage invitations, RSVP responses, guest information and the event pages an organizer shares.
- To enforce account permissions, package limits and access-code grants.
- To process purchases, record verified billing outcomes and provide account support.
- To send enabled transactional messages, investigate errors, prevent abuse and maintain service operation.
- To review contact requests, respond to privacy enquiries and meet applicable obligations.
Organizers, guests and shared links
Organizers control much of the information they enter and the questions they ask guests. They should have an appropriate basis to provide other people’s information, collect only what is needed and explain how it will be used. Guests with questions about the event itself should contact the organizer. They may also contact Honestly Zen about how the platform handles their information.
Private invitation or guest links can grant access to information or actions associated with an invitation. Treat them as private and avoid posting them publicly. Recipients may forward links or save content. The platform cannot make a shared link equivalent to a guarantee that content will never be copied. Review your event website, gallery and guest-facing settings before sharing them.
Service providers and payments
Hosting, database, backup, email and payment providers process information needed to deliver their services. The current setup uses hosted application and database infrastructure, Amazon SES for configured transactional email, Stripe for configured payments and externally managed backups. Provider arrangements may change as the service develops.
Paid checkout is handled through Stripe. Honestly Zen records information needed to connect a purchase with the appropriate account, such as a payment or checkout identifier, package, amount, currency and billing outcome. Enter payment card details only in the payment provider’s checkout. Stripe’s own handling of payment information is described in the Stripe Privacy Policy.
Information may be processed in countries where the relevant providers operate. The location and retention of provider systems are not represented as exclusively Canadian by this policy. Contact us if you need more information about a particular provider arrangement.
Cookies, sessions and optional services
The app uses session cookies and browser storage where needed for authentication, preferences and the functioning of the service. The redesigned public pages do not add advertising trackers or external font services. Existing or separately configured integrations may have their own behaviour. We will need to review and describe any new non-essential tracking before introducing it.
External links, social sharing apps, email clients and payment pages operate under their own terms and privacy practices. Opening a sharing tool does not confirm that a message was delivered. Choose recipients carefully and review the content before sending it.
Photos, files and sensitive information
Upload only content you have permission to use and share. Respect requests from people who do not want their images published, particularly where children are involved. Guest photo moderation can help an organizer review uploads before publication. Technical checks or moderation do not replace the organizer’s responsibility to make appropriate sharing decisions.
The gallery may resize images or remove location metadata. Keep original files separately when they matter to you. Attachments and exported documents may contain information entered by organizers or collaborators. Review them before sharing and avoid including unnecessary sensitive information in comments, notes or uploaded files.
Retention, archive and deletion
Information is kept as needed to provide the service, maintain legitimate operational records, respond to requests and meet applicable obligations. The appropriate period depends on the information and purpose. This policy does not promise that every category has the same retention period.
Archiving an event hides it from active planning and does not delete its records. Permanent deletion is a separate action. Export anything you want to keep before requesting or confirming deletion. Backup copies, logs and billing records may follow separate retention cycles, so removal from the active app does not mean every historical copy disappears immediately.
Demo data is intended to reset on the configured 24-hour cycle. Do not use the demo for real guest lists, private photographs or essential planning. Demo reset is not a statement that historical backup copies are immediately erased.
Your choices and requests
You can review and update available account or event information through the app. Contact the organizer about event-specific corrections, and use Contact us for platform privacy questions, access, correction or deletion requests. We may verify identity and authority before acting, particularly when a request concerns a workspace, a guest record or somebody else’s information.
Some requests may require us to retain limited information for legal, security, transaction or dispute-related reasons. If we cannot fulfil a request as made, we will explain the relevant limitation where appropriate. Avoid sending sensitive proof of identity until a suitable verification process has been agreed.
Security and policy updates
The app uses access controls and other technical measures intended to protect information. No online service or storage arrangement can promise absolute security. Keep account credentials private, use the correct sharing links and tell us about suspected unauthorized access through the support or contact route.
This policy may be updated as the service and its practices change. The date above identifies this version. Material changes should be reviewed before you continue using affected features. For questions, use the privacy topic on the contact page.