Mazly ("Mazly", "we", "us") is operated by Shahaf Shukrun, Israel ("the operator"). This policy explains what personal information we collect when you use the Mazly website and services (the "Service"), why we collect it, how we use and protect it, and the rights you have under the Israeli Privacy Protection Law, 5741-1981 (the "PPL") and the EU General Data Protection Regulation ("GDPR") where it applies.
1. Who is the database owner
Operator: Shahaf Shukrun · Israel. Contact for privacy requests: shahaf.shukrun@gmail.com.
2. What we collect
- Account data — name, email, hashed password (or Google identifier), preferred language, time zone.
- Event data — details you enter about your event: hosts, date, venue, invitation design, message templates.
- Guest list data — names, phone numbers, groups and RSVP details you upload or add for your guests.
- Guest RSVP data — attendance, party size, dietary notes and any custom fields your guests submit.
- Technical data — IP address, browser type, timestamps and basic error logs, needed for security and operation.
- Cookies / local storage — see our Cookie Policy.
3. Why we use it
- To operate the Service: create your account, save events, deliver invitation links, collect RSVPs.
- To protect the Service: prevent abuse, detect fraud, keep the platform secure.
- To communicate with you about your account (service emails only — no marketing without consent).
- To comply with legal obligations under Israeli and applicable foreign law.
Legal basis under the GDPR (where applicable): performance of a contract with you; our legitimate interest in operating a secure service; and your consent for optional processing. Under the PPL, processing is based on the informed consent you give by using the Service after reading this policy.
4. Who we share it with
We do not sell personal data. We share limited data only with service providers that make Mazly work:
- Hosting & database (Lovable Cloud, powered by Supabase) — stores your account, event and guest data.
- Google — used only if you sign in with Google, and for serving web fonts.
- WhatsApp — we do not send messages on your behalf. When you press "Send invitation" we open the WhatsApp app on your device with a pre-filled message; the actual send happens from your account.
Event hosts can see all data they added for their event, including guest names, phone numbers and RSVP responses. When you RSVP as a guest, you are submitting information to the host who invited you.
5. International transfer
Our infrastructure providers may store data on servers outside Israel, including in the European Union and the United States. By using Mazly you acknowledge this transfer. We rely on the providers' technical, organisational and contractual safeguards (including EU Standard Contractual Clauses where relevant).
6. Retention
- Account and event data are retained for as long as your account exists.
- Guest data is retained until the host deletes the guest, deletes the event, or deletes their account.
- Deleting your account permanently removes your profile, events, guests and RSVPs, subject to short-term backups and legal-retention obligations.
- Basic technical logs are kept up to 12 months for security and debugging.
7. Your rights
Under the PPL and, where applicable, the GDPR you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data (subject to legal exceptions);
- export your data in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time.
Signed-in users can export or delete their account directly from the Account page. For all other requests, email shahaf.shukrun@gmail.com. We aim to respond within 30 days.
If you are a guest and want your data removed from a specific event, contact the host who invited you, or email us and we will forward the request.
8. Security
Data is transmitted over HTTPS. Passwords are hashed. Row-level access rules ensure that hosts can only see their own events and guests. Access to production data is restricted to the operator.
9. Children
Mazly is not intended for children under 16. Guest information (name, phone) may in some cases relate to minors — the host is responsible for ensuring they have permission to include them.
10. Marketing & WhatsApp
Mazly does not send marketing messages on your behalf. Hosts who use the WhatsApp helper to invite guests are responsible for complying with the Israeli Spam Law (Amendment 40 to the Communications Law) — including obtaining prior consent from each recipient where required and honouring unsubscribe requests.
11. Changes
We may update this policy from time to time. Material changes will be announced on the Service and take effect on the date noted at the top of this page.
12. Contact
Questions or requests: shahaf.shukrun@gmail.com. You also have the right to lodge a complaint with the Israeli Privacy Protection Authority (PPA).