Privacy policy

Who we are

Rattibo is an online seating planner for weddings and other events. This policy explains how we handle personal information when you use rattibo.com.

Rattibo is operated by iTellU Ltd.

Company number: 516271103.

For anything about your data, write to info@rattibo.com.

What we collect

• Your account: your e-mail address, and your name if you give one or sign in with Google. We do not use passwords: you sign in with a one-time link sent by e-mail (valid for 20 minutes), or with Google.
• Your events: the event name, date and hall layout, and the guest list you enter or import. A guest list can include names, head counts, groups, phone numbers, notes, dietary and accessibility notes. You decide what goes in.
• Venue details on the venue plan: the venue's name and logo, and the name, e-mail address or phone number of the client you hand an event to.
• Payments: the plan you bought, the amount, the date and the payment status. Card details are entered on PayPlus's payment page and never reach our servers. For the monthly plan we keep an encrypted token from PayPlus that lets PayPlus charge the next month; it is not a card number.
• Technical records: a sign-in cookie that keeps you signed in; a record of each sign-in (the browser and IP address it was opened from); short-lived security records (sign-in links, rate-limit counters, payment notifications); and an activity log of account actions (sign-in, creating and deleting events, share links, exports, orders and payments) with the IP address, so we can investigate abuse and disputes. We do not use analytics or advertising trackers.

The demo on the home page needs no account: its seating plan is stored only in your browser (localStorage) and is not sent to us unless you sign in and choose to save it to your account.

Why we use it

• To provide the service: save your events, show your plan on your devices, and run the share links you create.
• To sign you in and keep your account secure.
• To take payments, issue invoices and keep the accounting records the law requires.
• To send service e-mails: sign-in links, receipts, renewal and plan notices, and a venue's invitation to its client. We do not send marketing e-mail without your consent.

The legal bases are performing our contract with you, our legal obligations (for example tax records), and our legitimate interest in keeping the service secure.

Guest lists: you are in charge

When you enter your guests' details, you decide why and how they are used, and we process them on your behalf only to run your event. Please add only what you need, and only information you are allowed to share with us.

Guests are never shown the whole list. A public guest link answers a name search with that guest's table only, never phone numbers, notes or the full list. A private venue link shows names and tables (no phones or notes) to whoever holds it, so send it only to the hall and the caterer. You can revoke any link at any time.

Who processes data for us

We use a small number of service providers, each bound to use the data only to serve Rattibo:

• Amazon Web Services (AWS), Frankfurt region (eu-central-1): hosting of the application and the database.
• PayPlus (Israel): payment processing, card tokens for the monthly plan, and invoices/receipts.
• Our e-mail delivery provider: sending sign-in links and service e-mails.
• Anthropic (United States): AI list recognition on the paid plans. Only when you choose to use it, the text, photos or files you submit are sent to Anthropic to be read into a guest list. Anthropic does not use this data to train its models.
• Google: only if you choose to sign in with Google, to confirm your identity.

Some of these providers process data outside Israel and the European Union. Where they do, we rely on the safeguards the law requires (such as standard contractual clauses or an adequacy decision).

We never sell personal information and never share it for advertising.

How long we keep it

• Your account and events: for as long as you keep them. A purchased event stays available for 24 months after its date.
• An event you delete can be restored from the dashboard for 30 days; meanwhile nobody else can open it and its links stop working. A deleted account leaves the service at once: its events are deleted, its links are revoked, its sign-ins end, and the account's e-mail address and name are erased. Copies in encrypted backups expire within the backup cycle (up to 35 days).
• To have a deleted event's stored content erased permanently as well, write to info@rattibo.com; we do it within 30 days.
• Payment and invoice records: as long as tax and accounting law requires (usually seven years). After an account is deleted they are no longer linked to your e-mail address.
• Security records: sign-in links are kept up to a day after they expire, rate-limit counters up to two days, and payment notifications 90 days. A sign-in record is kept until you sign out, or a year after it was last used. The activity log is kept as long as the account or event it belongs to.
• The demo: in your browser until you clear it (Settings → reset, or your browser's site data).

Your rights

Under the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13), and, where it applies to you, the EU General Data Protection Regulation, you may:

• see the personal information we hold about you, and get a copy of it;
• ask us to correct information that is wrong or incomplete;
• ask us to delete it, or stop using it for a particular purpose;
• take your data with you (portability);
• withdraw consent you gave, and object to processing based on our legitimate interest;
• complain to the Privacy Protection Authority in Israel, or to the data protection authority in your EU country.

Most of this you can do yourself: Settings → "Download my data" exports your account and all your events as a file, and Settings → "Delete account" deletes it. For anything else, write to info@rattibo.com; we answer within 30 days.

If you are a guest in someone's event, please contact the event's host first: they decide what is on their list. We will help them, or you, if needed.

Cookies and browser storage

• One first-party sign-in cookie keeps you signed in for up to a year, and it is renewed while you use Rattibo; signing out ends it at once. It is strictly necessary and is not used for tracking.
• When you sign in with Google, a short-lived cookie protects that sign-in from forgery.
• Your browser's local storage keeps the demo's seating plan and a few display preferences (for example a dismissed notice).

We do not use analytics, advertising or third-party tracking cookies, so there is nothing to consent to.

Security

Data travels over HTTPS and is stored encrypted at rest. Payment tokens and share-link secrets are additionally encrypted in our database. Access to production systems is limited to the people who run the service. If a breach affecting your information occurs, we will notify you and the authorities as the law requires.

Children

Rattibo is meant for adults planning events. We do not knowingly open accounts for children under 18.

Changes

If we change this policy in a way that matters, we will say so on this page and, for significant changes, by e-mail before they take effect.

Contact

Privacy questions and requests: info@rattibo.com.