Zaffa

Privacy Policy

Last updated 16 May 2026

What Zaffa is

Zaffa is a wedding-invitation and guest-management service. It pairs an iOS app for couples with a web invitation that guests view by link. A Custom GPT — “Zaffa: Wedding Planner” — can also read and update a couple’s wedding through the same API. This policy covers all three.

What we collect

  • Account. Your email address, used to send the one-time login code.
  • Wedding details. Couple names, date, venue, invitation sections (welcome message, photos, registry, accommodation), theme choice, and any palette overrides.
  • Guests. Names, phone numbers, RSVP status, plus-one details, meal preferences, table assignments, and any custom answers a guest provides.
  • RSVP submissions. What each guest replied, with the name, phone, and email they typed when responding.
  • Photos. Any images you upload for the invitation. Stored in Supabase Storage.

What we do not collect

  • No tracking pixels or third-party analytics on the public invitation page.
  • No location data.
  • No payment information — Zaffa does not process payments.
  • No data from guests beyond what they submit through the RSVP form.

Where it lives

Data is stored on Supabase, hosted in their managed cloud, with row-level security so couples can only see their own wedding row. Photos sit in a Supabase Storage bucket. The web invitation runs on Vercel.

The ChatGPT integration

“Zaffa: Wedding Planner” is a Custom GPT that authenticates to Zaffa with OAuth (a one-time code sent to your email). Once signed in, it can read and write only your wedding — the same data the iOS app can. Messages you send to the GPT are processed by OpenAI under their own privacy terms; the wedding data the GPT reads is sent from Zaffa’s API to OpenAI as part of the conversation.

Retention

We keep wedding data while your account is active. If you ask us to delete your wedding, we remove the wedding row, all guests, RSVP submissions, and uploaded photos within 30 days. Email us at info@getzaffa.app to request deletion.

Sharing

We do not sell data. We share data only with the infrastructure providers above (Supabase, Vercel, OpenAI when you use the GPT) and only as needed to run the service.

Your rights

You can ask us at any time for a copy of your data, to correct it, or to delete it. Email info@getzaffa.app and we’ll respond within 30 days.

Children

Zaffa is intended for adults planning a wedding. We don’t knowingly collect data from anyone under 16.

Changes

If this policy changes meaningfully, we’ll update the date at the top and, where we can, let you know in-app.

Contact

info@getzaffa.app — for any privacy question, data request, or concern.