Last updated: July 14, 2026

1. Introduction and our legal commitment

At MyEvent we are committed to protecting your privacy and your guests' privacy, and we process personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations. This policy explains what we collect, why, and how we protect it. It applies to our marketing site myeventsa.com and the invitations platform app.myeventsa.com.

2. Data we collect

Account and order data: name, mobile number, email, contact details, and your order details (package, invitation count, add-ons, city, event date).

Event and guest data: event details (type, date, venue), guest lists (names and phone numbers) provided by the event owner, RSVP status and QR check-in logs.

AI assistant (chat) data: the text of your messages in the site chat and whatever you choose to share there (guest count, city…). Your name and mobile number are collected only if you enter them yourself to request a follow-up.

Usage and tracking data: platform activity logs, device and browser info, and site browsing statistics (collected first-party; external analytics run only with your consent — section 9).

3. Your guests' data is a trust

We process your guest lists on your behalf and solely to run your event: sending invitations and reminders, receiving RSVPs, and check-in verification. We never use your guests' numbers or data for marketing, never sell them, and never share them beyond what operating the service requires. They are deleted within the retention windows in section 10.

4. The site's AI assistant

• To reply instantly, chat messages are processed by external AI providers (such as Google Gemini and Groq) under data processing agreements, and are not used for other purposes.
• By continuing a conversation you consent to processing your messages to provide and improve the service.
• Please do not share sensitive data in the chat (card numbers, documents, health data…) — the assistant does not need it and will never ask for it.
• We do not store your raw IP address in chat records — only a salted hash, used strictly for abuse protection.
• Conversations not linked to a contact request are automatically deleted within 90 days.

5. Payments

• Online payment is handled by Dodo Payments on a secure, encrypted payment page — your card details are entered directly with the payment provider, never pass through our servers, and are never stored by us.
• We receive only the transaction status and reference to complete your order.

6. How we use your data — and our legal bases

• Operating the e-invitations service: delivery, RSVPs, QR codes, reports (performance of our contract)
• Communicating with you about your order and account (contract and consent)
• Improving and developing the service, measuring performance (legitimate interest, data-minimised)
• Protecting the platform from fraud and abuse (legitimate interest)
• Complying with applicable Saudi regulations (legal obligation)

We make no automated decisions with legal effect on you without human involvement.

7. Sharing data with third parties

We do not sell your personal data. We share the minimum necessary with providers acting on our behalf under data protection agreements:

• Google (Firebase): data storage, authentication, notifications
• WhatsApp / Meta: delivering invitations and reminders to your guests
• Dodo Payments: payment processing (section 5)
• AI providers: processing chat messages (section 4)

Some data may be processed or stored by these providers outside Saudi Arabia; such transfers are made only with the safeguards the PDPL requires.

We may also disclose data where required by law or by a competent judicial or regulatory authority.

8. Data protection

• Encryption in transit and at rest
• Multi-layer authentication and least-privilege access
• One-time-use QR codes to prevent copying and forgery
• Continuous security monitoring, abuse detection and rate limits
• Regular backups
• If a breach affecting your data occurs, we will notify the competent authorities and affected users in line with the PDPL's requirements and timelines.

9. Cookies and tracking

• Essential (no consent needed): what the site needs to run securely, plus basic first-party browsing statistics collected by us directly with no external tools.
• Analytics and marketing (only with your consent): Google Analytics, Microsoft Clarity and Meta Pixel run only after you accept them in the consent banner — declining them does not affect the service in any way.
• Local storage on your device: we keep your assistant conversation temporarily (expires within 24 hours) and simple UI preferences (like dismissing the assistant bubble) — stored on your own device and clearable from your browser.

10. Data retention

• Account data: for as long as your account is active
• Event data and guest lists: 1–12 months after the event, then deleted automatically
• Assistant conversations not linked to a request: deleted automatically within 90 days (section 4)
• Order and payment records: as required by financial and tax regulations
• You can request deletion at any time (section 11)

11. Your rights under the PDPL

• Be informed about how your data is processed and access a copy of it
• Correct or complete inaccurate data
• Request deletion or destruction of your data (subject to legally required retention)
• Withdraw your consent at any time, without affecting the lawfulness of prior processing
• Lodge a complaint with the competent data protection authority in Saudi Arabia (the Saudi Data & AI Authority, SDAIA) if you believe our processing violates the law

To exercise any of these rights, email us at info@myeventsa.com. We respond within the statutory timelines and may ask for proof of identity to protect your own data.

12. Children's data

Our platform is not directed to anyone under 18 and we do not knowingly collect their data. If you are a guardian and believe a minor has provided us data, contact us to delete it.

13. Updates to this policy

• We may update this policy from time to time; the last-updated date appears at the top
• We will notify you of material changes by email or a clear in-platform notice

14. Contact us

Email: info@myeventsa.com
Website: myeventsa.com