Short-form privacy notice. You received an invitation created with Passly. The person organizing the event (the host) decides which of your data is used and for what; Passly is the platform that stores and processes it on the host's behalf. Your data is used only to organize that event: to invite you, to know whether you are attending and with how many people, to prepare your seat and to give you access. We do not sell it, we do not send you advertising and we do not use it for anything else. You can view, correct or ask for your data to be deleted at any time from “Your data” (“Tus datos”), at the bottom of your invitation.
You do not need a Passly account for any of this. This notice expands on the summary above. If you also have a Passly account, the Privacy Notice applies to you as well.
1. Who decides about your data
The host (the person, family, company or organizer who invited you) is the one who uploads the guest list and decides what your data is used for within their event.
Passly ([PENDIENTE: Razón social / nombre legal del titular]) provides the technology: it stores and processes the data only on the host's instructions, in accordance with our Data Processing Agreement, and protects it with the measures described in Security. Even when the host is organizing a private party, Passly meets its obligations as a platform.
Passly uses invitation data on its own account only for what is strictly necessary for the platform to operate securely (for example, preventing mass automated submissions or abuse).
2. What data about you may be in Passly
| Source | Data |
|---|---|
| Uploaded by the host | Your name and, if the host added them: phone number, email, group or family, number of passes, companions, table, whether you are a minor, notes, menu preferences or special needs. |
| Provided by you when you RSVP | Whether you are attending, how many people are coming, your companions' names, your message and, if the form asks for it, your phone number or email. |
| Health data (optional) | Dietary restrictions or accessibility needs. They are stored only if you tick the express consent box next to the field. If you do not tick it, they are not sent. |
| Generated when you use the invitation | When you opened your personal invitation and how many times, your check-in record at the door, and an encrypted code of your IP address to prevent abuse. |
| If you use the event gallery or app | The name you enter, your photos, comments, votes, song requests and, in the games, your selfie. |
The invitation does not use advertising cookies or third-party analytics. The venue map and the music connect to Google / YouTube only if you turn them on.
3. What it is used for
- Showing you your personalized invitation.
- Recording your response and that of your companions, and notifying the host.
- Organizing tables, menu and special needs.
- Giving you access at the entrance (for example, with your QR code).
- Making the event gallery and app work.
- Keeping the platform secure and preventing abuse.
Legal basis (if you are in the EU or the United Kingdom): the host's legitimate interest in organizing their event and, for health data, your express consent, which you can withdraw whenever you wish.
4. Who can see it
- The host and their organizing team.
- Entrance staff authorized by the host (to identify you on arrival).
- Other guests, only what you post in the event gallery or app.
- Passly staff, only if necessary for support, security or legal obligations.
- Passly's technical providers (hosting and database), under contract: see Sub-processors.
Your data is stored on servers in the United States, with the safeguards described in the Privacy Notice.
5. How long
For as long as the host keeps the event in Passly. If the host deletes the event or your record, it is permanently erased after 30 days; if the host deletes their account, after 14 days. Invitation open records are deleted after 13 months and game selfies 30 days after the event. More detail in the Retention Policy.
6. Your rights
You can access your data, correct it, ask for it to be deleted, object to its use, withdraw your consent regarding health data and, in the EU/United Kingdom, request its portability or the restriction of its use.
- Open your invitation and tap “Your data” (“Tus datos”) at the bottom: you will see what the host holds about you and can request correction or deletion.
- Or use the form in the Privacy Center, with no account needed.
- Or write to [PENDIENTE: Correo de privacidad (p. ej. privacidad@wepassly.com)].
Because the host is the one who decides about this data, we forward your request to them immediately so they can handle it; if they do not respond in time, Passly steps in. We respond within the legal deadline that applies to you (20 business days in Mexico, 1 month in the EU/United Kingdom).
You can also contact the data protection authority in your country (in Mexico, the Anti-Corruption and Good Governance Ministry (Secretaría Anticorrupción y Buen Gobierno)).
7. Minors
If the data or photos belong to a minor, the host represents that they have the consent of the minor's mother, father or guardian. Minors must use the event gallery and app with the permission of a responsible adult. If you believe there is data about a minor without permission, request its deletion from “Your data” or at [PENDIENTE: Correo de privacidad (p. ej. privacidad@wepassly.com)].
8. Contact
For any question about the event, contact the host directly. For questions about the platform: [PENDIENTE: Correo de privacidad (p. ej. privacidad@wepassly.com)] · [PENDIENTE: Razón social / nombre legal del titular], [PENDIENTE: Domicilio completo (calle, número, colonia, C.P., ciudad, estado, país)].
Version history
- v1.0 · October 1, 2026 · Material change — First published version.