Privacy policy

Who we are

Lizzi is a guest-list service for event organisers. It lets organisers build guest lists, send invitations, collect answers, share promo links and check guests in at the door, on the web at lizzi.app and in the Lizzi iPhone app.

Lizzi is operated by Dozijn13, a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) under number 61499072, with its registered office at Loefzijde 11, 1034 KW Amsterdam, the Netherlands. In this policy "Lizzi", "we" and "us" mean Dozijn13.

You can contact us about privacy at hello@lizzi.app.

Two roles: when we decide, and when the organiser decides

We handle personal data in two different capacities, and which one applies changes who you should talk to.

For the people who use Lizzi to run events (organisers and the team members they invite) we are the controller. We decide why and how that account, organisation and billing data is used, and this policy is our notice to you.

For the guests on an organiser's list we are a processor. The organiser decides who goes on the list, what is recorded about them and whether they are contacted, and the organiser is the controller of that data. We only process it on the organiser's instructions, under the data processing agreement in the annex to our terms. If you are a guest, the organiser who invited you is the right first contact for any question or request about your data. The invitation and promo-link pages name the organiser. If you contact us instead, we will pass your request to that organiser and help them answer it.

What we collect about organisers and team members

Account details. Your name, your email address and, if you add one, a phone number on your profile. If you sign in with Apple or Google, we receive the identifier that provider gives your account, together with the email address and name it shares. If you use Sign in with Apple and choose to hide your email, we receive Apple's relay address instead of your own. If you sign in with a password, the password is handled by our sign-in provider and stored only as a one-way hash; we never see it.

Organisation and team details. The name of each organisation you create or join, your role in it (owner, admin, host or promoter in an organisation; co-host, door or promoter on an event), who invited you and when, and the email address or phone number an invitation was sent to. Your email notification preferences.

Events. What you enter about an event: its title, description, location, date, times, time zone, guest limit and any poster image you upload.

Activity. Which team member added, edited or checked in each guest, and a history of edits to a guest record. We keep this so organisers can see who did what at the door.

Messages to us. If you send feedback through the form in your account on the website, or email us, we receive your name, your email address and what you wrote.

Billing. For organisations on a paid plan we hold the billing email address, the plan, the subscription status and the next billing date, and the identifiers Stripe gives the customer and subscription. Card details, billing address and VAT number are entered on Stripe's own pages and held by Stripe; they do not pass through or stay on our systems. Invoices are issued through Stripe.

What we process for organisers about their guests

Organisers decide what goes on their lists. Lizzi has room for the following, and only what the organiser or the guest actually enters is stored.

Guest details. First name, last name, email address, phone number, notes written by the organiser's team, tags (for example "VIP" or "Press") and the number of entries the guest is allowed.

Invitations and answers. Whether an invitation was sent and by which channel, whether it was opened, whether the guest said they are going or declined, how many people they are bringing, when a reminder was sent, and whether an invitation email bounced. When a guest claims a spot through a promo link, the name and, where the organiser asks for it, the email address they give.

Check-ins. Each admission or reversal at the door: when it happened, how many people were let in, which team member did it and, where the device supplies one, an identifier for the device used.

Door staff see only what they need to let people in. A team member with the door role sees names, tags and entry counts, never email addresses or phone numbers.

Our terms do not allow organisers to record sensitive information, such as health, religion, sexual orientation, criminal history or identity documents, in guests' notes or tags.

Technical data

Server logs. Our hosting provider records technical details of each request, including the IP address and browser or app version, to operate and protect the service. These logs are kept for up to 30 days.

Abuse protection. To slow down password guessing and mass sign-ups, we count attempts per IP address and per email address. We store only a one-way hash of the IP address or email address with the count, never the address itself, and each count expires within one hour.

Error reports. When something breaks, an error report may be sent to our error-tracking provider in the European Union. Names, email addresses, phone numbers and access tokens are removed before the report leaves our servers, and links that grant access (such as invitation links) are not recorded.

Performance measurements. On the website we measure, for a sample of page loads, how long key screens take to become usable. These measurements contain timings and coarse categories only (for example "door screen" or "guest list"). They contain no account, organisation, guest or event identifiers, no web addresses and no search text. Raw measurements are deleted after 7 days and daily summaries after 90 days.

App updates. The iPhone app checks for and downloads updates from Expo, the provider of the framework the app is built with. That check sends the app version, the device platform, a random identifier for the installation and, unavoidably, your IP address.

Why we use this data, and on what legal basis

To provide Lizzi to you: creating and securing your account, running your organisations, events and guest lists, and sending the emails the service depends on (confirming your address, resetting a password, inviting a team member, telling you an invitation bounced). The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR).

To take payment and keep financial records. The legal bases are our contract with you and our legal obligation to keep records under Dutch tax law (Article 6(1)(c) GDPR).

To keep Lizzi secure and working: abuse protection, server logs, error reports, performance measurements and app updates. The legal basis is our legitimate interest in running a secure and reliable service (Article 6(1)(f) GDPR). We have kept each of these to the minimum that achieves it, as described above.

To answer feedback and support requests. The legal basis is our contract with you or, where you are not a customer, our legitimate interest in answering people who write to us.

To process guest data for organisers. We do this on the organiser's instructions as their processor (Article 28 GDPR). The organiser is responsible for having a lawful basis for adding guests and contacting them.

We do not send marketing email. We do not sell personal data, show advertising, build advertising profiles, or track you across other companies' apps or websites. We do not make decisions about anyone by automated means that have legal or similarly significant effects.

Cookies and similar storage

Lizzi uses only the cookies and on-device storage it needs to work. We use no analytics, advertising or third-party tracking cookies, so we do not ask for cookie consent.

On the website: sign-in cookies set by our sign-in provider keep you signed in; a cookie named selectedOrganizationId remembers which of your organisations you are working in; and a cookie named sidebar_state remembers whether you left the side menu open. The browser's local storage remembers whether you dismissed the prompt to install Lizzi on your home screen, and your choice of push-notification setting on that device.

In the iPhone app: your sign-in session is kept in the iPhone's secure keychain, and the app remembers which organisation you last selected.

Who we share data with

We use the following service providers (sub-processors) to run Lizzi. Each processes data only to provide its service to us, under a contract that requires it to protect the data.

Vercel Inc. hosts the website and runs our servers. Our server functions run in Frankfurt, Germany. Pages and files are delivered through Vercel's global network, so a request may be answered from a location near the visitor. Vercel is a United States company.

Supabase Inc. provides our database and our sign-in service. The database is hosted on Amazon Web Services in London, United Kingdom, and holds the account, organisation, event and guest data described above, including event posters. Supabase is a United States company.

Resend provides email delivery: sign-in emails, team invitations, guest invitations and their reminders, and messages sent to our feedback inbox. Resend receives the recipient's email address and the content of the email. Email for lizzi.app is sent from Resend's European Union region in Ireland. Resend is a United States company.

Functional Software Inc., trading as Sentry, receives error reports with personal data removed as described above. Reports are stored in Sentry's European Union region in Germany. Sentry is a United States company.

650 Industries Inc., trading as Expo, delivers updates to the iPhone app and receives the technical data described under "App updates". Expo is a United States company.

Stripe Payments Europe, Limited, in Ireland, takes payment for paid plans and issues invoices. Stripe receives the billing email and the card, address and VAT details you enter on its pages, and processes no guest data. Stripe acts as our processor for billing, and as an independent controller for its own fraud prevention and its legal obligations as a payment provider, under its own privacy policy.

When you choose to sign in with Apple or Google, that provider confirms who you are and shares your identifier, email address and name with us. Apple and Google act as independent controllers for this, under their own privacy policies, and are not our processors.

When an organiser shares an invitation by WhatsApp or text message, Lizzi opens the organiser's own messaging app with the message filled in. The organiser sends it, not Lizzi, and the messaging provider's own terms apply.

We may also disclose personal data where the law requires it, for example to a court or a regulator, or to protect the rights and safety of our users. If Lizzi or the business behind it is sold or reorganised, personal data may pass to the new owner, who must continue to protect it under this policy.

International transfers

We keep personal data in Europe. Our database is in the United Kingdom, which the European Commission has recognised as providing an adequate level of protection (adequacy decision under Article 45 GDPR), so data can be stored there without further safeguards. Our server functions and error reports are in Germany, and email is sent from Ireland.

Some of our providers are United States companies, and their staff or systems may access data from the United States, for example to provide support or deliver pages through a global network. Where that happens, the transfer is covered by the EU-US Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards at hello@lizzi.app.

How long we keep data

Account data is kept while your account exists. When you delete your account, your account and your sign-in are deleted straight away, together with every organisation you are the only owner of and everything in it: its events, guests, check-ins, invitations and promo links. If another owner remains, the organisation stays with them; records of what you did in it (for example who checked a guest in) are kept for the organisation without your name.

When you delete an organisation but keep your account, the organisation is hidden and its links stop working straight away. To have it removed permanently, with everything in it, email hello@lizzi.app and we will do so within one month.

Guest data is kept for as long as the organiser keeps it in Lizzi. An organiser can permanently delete an individual guest at any time, which removes that guest's details, check-ins and edit history immediately.

Billing records are kept for seven years, as Dutch tax law requires.

Abuse-protection counts expire within one hour. Raw performance measurements are deleted after 7 days and daily summaries after 90 days. Server logs, error reports and the records our email provider keeps of sent email are kept for up to 30 days.

Our database provider keeps backups so data can be recovered after a failure. Deleted data remains in those backups until they expire, after up to 7 days, and is not restored except to recover from a failure.

How we protect data

Data is encrypted in transit and at rest. Access inside an organisation follows the roles the organiser assigns, so a door team member cannot see guests' contact details. Links sent to guests and team members use long random codes that cannot be guessed from one another. Passwords are stored only as one-way hashes by our sign-in provider.

If a personal data breach is likely to put your rights at risk, we will tell you without undue delay, and we will notify the Autoriteit Persoonsgegevens where the law requires it. If a breach affects guest data, we will tell the organiser concerned without undue delay so they can meet their own obligations.

Your rights

Under the GDPR you have the right to ask for access to your personal data, to have it corrected, to have it deleted, to restrict or object to its use, to receive it in a portable format, and, where we rely on your consent, to withdraw it at any time.

You can change your name and contact details in your account settings, and you can delete your account yourself, on the website or in the iPhone app, under Account. For anything else, email hello@lizzi.app. We will answer within one month, and may need to confirm your identity first.

If you are a guest, please contact the organiser who invited you, since they decide what is held about you. If you contact us, we will pass your request on and help the organiser respond. An organiser can correct or permanently delete a guest's details at any time.

Complaints

If you think we have handled your data wrongly, please tell us first at hello@lizzi.app so we can put it right. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the EU country where you live or work.

Children

Lizzi accounts are for adults running events and are not meant for anyone under 18. Organisers are responsible for any guest data they record about children.

Changes to this policy

We will update this policy when what we do with personal data changes. The date at the top shows when the current version took effect. If a change matters to how your data is used, we will tell account holders by email at least 30 days before it takes effect.

Contact

Dozijn13, Loefzijde 11, 1034 KW Amsterdam, the Netherlands. KvK 61499072. Email: hello@lizzi.app.