Privacy policy
Last updated: November 13, 2026
envelope.events helps people host an event: invitations, answers from guests, seating, the day's schedule, a shared photo album and the planning around it. This page explains what personal information we handle, why, who helps us run the service, how long we keep it, and what you can ask of us.
It applies to everyone the service touches: hosts (whoever creates an event, and the people they share it with), guests (people a host invites), and helpers (vendors and people with a role on the day whom a host adds).
Who we are
envelope.events is run from Montréal, Québec. The person in charge of protecting personal information is Jad El-Asmar. Questions and requests: help@envelope.events.
What we collect
From hosts. Your name, email address and profile picture when you create an account (by email or through Google, Apple or Facebook if you choose them); the details of your event (names, date, venue, wording, photos you upload for the invitation); and what you add to plan it: your guest list, seating, schedule, vendors, to-dos and notes.
About guests, entered by a host or by the guest. Name, and the email address or phone number the host uses to send the invitation; the answer (coming or not, how many, names of the people coming); meal choices and dietary needs if the event asks for them; parking needs; whether the invitation was delivered and opened; and, if the guest shares photos, their name, email, and the photos and videos they upload.
About helpers. What the host enters: name, company, contact details, role, and notes; and what a vendor fills in on their own form (their staff and meals).
Payments. When a host pays, Stripe handles the card. We never see or store card numbers; we keep what was bought, when, and the amount.
Technical. Our servers record requests (time, page, address and device information) to run, secure and fix the service. We don't use advertising or third-party analytics trackers. Your browser keeps your sign-in session and a few preferences (like light or dark mode) on your device.
Why we use it
- To provide the service: send invitations, reminders and the day-of page, collect answers, show hosts their guest list, seating, schedule and album.
- To let hosts share an event with the people helping them, with the role they choose.
- To take payment for what a host buys, and keep the records we must.
- To keep the service secure, prevent abuse, and fix problems.
- To answer you when you write to us.
We don't sell personal information, and we don't use it for advertising.
Who helps us run it
These companies process personal information for us, only to provide their part of the service:
| Service provider | What for |
|---|---|
| Amazon Web Services | Hosting, the database, file storage, and sending email (in the United States, us-east-1) |
| Clerk | Accounts and sign-in |
| Stripe | Payments |
| Twilio, and Meta for WhatsApp | Sending invitations, reminders and links by text message or WhatsApp, when a host chooses those |
| Anthropic | The Claude chat on the dashboard, when a host uses it (see below) |
| Sign in with Google, when you choose it; fonts on our pages |
Because these providers are based in or store data in the United States, your information is stored and processed outside Québec and Canada, where it may be accessible to authorities under the laws there. We choose providers that protect it under contract.
We may also disclose information when the law requires it, or to protect the rights and safety of people using the service.
Claude
Hosts can ask Claude, an AI assistant made by Anthropic, to help plan their event.
- The chat on the dashboard sends your messages, and the event details Claude looks up to answer them (such as guest names, answers and seating), to Anthropic to produce a reply. Chats are kept for 90 days after their last message so you can come back to them.
- Your own Claude account, if you connect it: Claude reads and changes your event through our service, and what you share in your Claude chats is handled by Anthropic under your own Claude account's terms. You can disconnect it at any time from the dashboard.
Signing in with Google
If you sign in with Google, we receive your name, email address and profile picture from your Google account, and use them only to create and sign in to your envelope.events account. We don't request access to anything else in your Google account, and we don't share, sell or use this information for any other purpose. Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.
How long we keep it
- An event and everything in it stays while the host keeps it. A deleted event can be restored for 30 days, then it and its records are erased.
- The photo album is online for a year after the event, or longer if the host extends it. After it closes, its files are kept 30 more days so the host can still download them, then deleted.
- Dashboard chats with Claude: 90 days after their last message.
- Accounts stay until you ask us to close yours.
- Payment records are kept as long as the law requires.
- Server logs are kept to secure and fix the service.
Your rights
You can ask to see the personal information we have about you, to correct it, to have it deleted, or to receive it in a structured format, and you can withdraw your consent at any time. Hosts can view, change, export and delete their events and guest lists themselves on the dashboard.
Guests: your invitation comes from the host, who decides who is invited. You can ask the host to change or remove your information, or write to us and we'll help.
Write to help@envelope.events. We answer within 30 days. If you're not satisfied with our answer, you can complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
Security
Information is encrypted in transit and at rest, access is limited to what each part of the service needs, and each event is visible only to its host and the people they share it with. Guest links are private to each guest. No system is perfectly secure; if a breach puts your information at risk, we'll tell you and the authorities as the law requires.
Children
The service is meant for adults hosting events. A host may list children as guests (for example, for a seat or a kids' meal); that information is used only for the event.
Changes
If we change this policy, we'll update the date above, and tell hosts by email or on the dashboard when the change is significant.