Legal
Privacy Policy
Last updated: 11 July 2026
1. Who we are
Play2Join is a service operated by Lorenzo Corradi, sole trader based in Italy, VAT number IT07259710486 ("we", "us", "our"). You can contact us at hello@play2join.com.
2. Data we collect
We collect only what is necessary to run the service:
- Account data: email, name and authentication identifiers.
- Event content: invite copy, images, questions and configuration you create.
- Guest RSVP data: name, email or phone and answers your guests submit through your invite.
- Billing data: processed by Stripe; we store only customer and subscription references.
- Technical data: IP address, device, browser and basic usage logs for security and analytics.
3. How we use data
- To provide, secure and improve the service.
- To deliver transactional emails (magic links, RSVP notifications, reminders).
- To detect fraud and abuse.
- To comply with legal and accounting obligations.
We do not sell personal data and we do not use it for advertising profiling.
4. Legal basis (GDPR)
We process personal data based on (a) performance of the contract with you, (b) your consent where required, (c) our legitimate interest in running a secure service, and (d) legal obligations.
5. Sub-processors
We rely on trusted providers, each acting as a data processor:
- Supabase — database, authentication and file storage (EU region).
- Cloudflare — hosting and CDN.
- Stripe — payments.
- Resend — transactional email delivery.
6. Data retention
Account and event data are retained for as long as your account is active. You can delete individual invites and participants at any time from the dashboard. On account deletion, personal data is erased within 30 days, except where retention is required by law (e.g. invoicing records).
7. Your rights
Under GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to lodge a complaint with your local supervisory authority (in Italy, the Garante per la protezione dei dati personali). To exercise these rights write to hello@play2join.com.
8. Cookies
We use only strictly necessary cookies (session, language preference). We do not use third-party advertising cookies.
9. Security
Data is encrypted in transit (HTTPS) and at rest. Access is protected by authentication and role-based database policies.
10. Changes
We may update this policy. The "Last updated" date at the top always reflects the current version.