The short version. You can use Seatful without giving us much at all, and your events stay on your device by default. The iPhone and iPad app also keeps them in your own private iCloud so they appear on your other Apple devices; that copy is stored by Apple, and we cannot see it. If you create an account to back up and sync, or publish an RSVP or share page, the data needed for that feature is stored on our backend so it can work across your devices and reach your guests. We do not sell or share your personal information, we do not run advertising, and we do not track you across other apps or websites. You can delete your account and your data at any time.
Who we are
Seatful is provided by Handler Labs LLC ("Seatful", "we", "us", "our"). This policy covers the Seatful iOS app and the seatful.app website and web app, including the guest-facing RSVP, share, and seat-finder pages. You can reach us any time at support@seatful.app. Our postal address is 5510 NW 38th Terrace, Coconut Creek, FL 33073, United States.
Our role: when we are a processor, and when we are a controller
Most of what you put into Seatful is a guest list and a seating plan that belong to you. For that guest information, you are the controller and we act as your processor: we store and process it on your instructions, to provide the Service to you, and you are responsible for having a lawful basis to collect and use it. We describe your responsibilities in our Terms of Use.
For a few things we act as the controller ourselves: your account (your email), the small amount of data our website needs to run, payments you make to us on the web, and the responses a guest types into a Seatful-hosted RSVP form.
What we handle, and why
Your events and guest lists
Your events, tables, seating, and guest lists are created on your device. A guest entry can include a name, any contact details you choose to add, meal choices, dietary or allergy notes, plus-ones, party groupings, and your table layout and seating. If you do not sign in, this stays on your device and is not sent to us, except when you use a publishing feature described below. If you add a venue photo or floor-plan image as a tracing background, that image is stored only on your device and is never uploaded, exported, or published.
iCloud sync (iPhone and iPad app)
The Seatful iOS app keeps your events in your own private iCloud database, so the same events appear on your other iPhones and iPads signed in to the same Apple Account. This copy is stored by Apple in your iCloud account, under your agreement with Apple and Apple's privacy policy. It is not sent to us, and we cannot read it. The private owner token for any page you publish is kept in your iCloud Keychain, so your other devices can keep updating that page. Venue and floor-plan images are not included. You can turn iCloud off for Seatful in your iPhone's Settings (your name, then iCloud); the app then keeps working with the events on that device.
Backup and sync (when you sign in)
If you create an account and turn on backup and sync, your event documents, including the guest information above, are stored on our backend so you can reach them on your other devices and on the web. This is how the same event appears on your phone and at seatful.app. Legal basis: performance of our contract with you.
Your account
To create an account we collect your email address and use it to sign you in with a one-time code or link, and to send you essential service messages. We do not use it for marketing without your consent. Legal basis: performance of our contract with you, and our legitimate interest in securing accounts.
RSVP pages (you choose to publish)
When you publish an event's RSVP page, Seatful stores your guest list (including, if you set one, the number of places reserved for a guest's family, which that guest sees on their own RSVP page) and your form settings (such as meal options, a plus-one policy, a deadline, and a welcome message) on our backend so your guests can respond from a link. A guest who opens their link may submit their RSVP status, and optionally a meal choice, dietary or allergy notes, and a plus-one name. For these direct guest submissions we act as a controller alongside you, and the guest-facing page links to this policy. This information is stored on our backend and synced back to your device.
Shared charts and the seat finder (you choose to publish)
If you publish a client share link or a guest seat-finder page, Seatful publishes a read-only view of guest names and their tables to a private link. The seat finder works like the printed seating board at an event entrance: anyone with the link can look up guest names and table numbers, but it never shows contact details, meal choices, dietary notes, or RSVP responses. If you publish your event with a floor plan, the seat-finder page can also show a simple map of the room (table shapes, table numbers, and zone labels); the map never contains guest names or RSVP details. You can revoke or remove these pages at any time.
Payments
Seatful offers a one-time Event Pass and a Pro subscription. On the iOS app these are sold through Apple, who process your payment; we never see your card details, and Apple shares limited purchase and subscription status with the app so it can unlock what you bought. On the web, these are sold through Stripe, who process your payment as our payment provider; we receive confirmation of your purchase and your subscription status, and a customer record, but not your full card number. Legal basis: performance of our contract with you, and compliance with our legal obligations (such as tax and accounting).
Support messages
If you email support@seatful.app, we receive your email address and whatever you write, so we can help you. Legal basis: our legitimate interest in supporting you and keeping records of support requests.
Website technical data
Like any website, our hosting provider processes basic technical request data, such as your IP address, to deliver and secure the site. Legal basis: our legitimate interest in operating a secure, reliable website. See Cookies and local storage.
Sensitive information (dietary and allergy notes)
Dietary and allergy notes can reveal information about a person's health or beliefs, which many laws treat as sensitive or special-category data. We do not ask for it; you or your guest choose to add it so a caterer can plan. If you enter this kind of information about your guests, you are responsible for having the appropriate consent or other lawful basis, as set out in our Terms of Use. On guest-facing RSVP forms, the dietary field is optional. We apply extra care to this information and do not use it for any purpose other than providing the Service.
Who we share data with (our sub-processors)
We do not sell your personal information, and we do not share it for advertising. We use a small number of service providers to operate Seatful, and they may process your data only on our instructions:
- Supabase (database and authentication), United States: stores your account, your synced and published event data, and the anonymous usage counts described below.
- Cloudflare (hosting, content delivery, and privacy-first web analytics), United States and global edge: serves this website and the guest-facing pages, provides security, and measures aggregate, cookieless traffic.
- Stripe (payments on the web): processes web purchases and subscriptions.
- Resend (email delivery), United States: delivers the email we send you, such as sign-in codes and any reminder you have asked to receive.
- Apple (payments and distribution on iOS): processes App Store purchases and distributes the app.
Access to our database is locked down: only Seatful's own server functions can read or write the data, each published event is protected by a private owner token held on your device, and all traffic uses HTTPS.
Where your data is processed (international transfers)
Seatful is operated from the United States, and the providers above store and process data in the United States. If you are outside the United States, including in Canada, Mexico, Australia, New Zealand, or Japan, your information is transferred to and processed in the United States. While it is in the United States it may be accessible to United States courts, law enforcement, and government or national-security authorities under the laws of that country. We remain accountable for your information and protect it with the safeguards described in this policy, including data-protection terms in our contracts with these providers and the security measures described below. You can ask us for more detail at support@seatful.app.
Analytics and usage data
The seatful.app website uses Cloudflare Web Analytics, a privacy-first measurement tool. It counts aggregate traffic, such as page views, the pages visited, referrers, and the country a visit comes from, along with page performance. It does this without cookies, without cross-site tracking, and without collecting personal data or building a profile of you. We use it only to understand how the site performs, and there is no advertising.
The Seatful iOS app sends us a small set of anonymous usage counts, once a day. Each count says only that a product signal happened a certain number of times on a given date in a given app version, for example how many times a paywall was shown. The counts carry no account, device or installation identifier, no IP address and no free text, so they can be added up but never traced to a person or joined to anything else. Your event contents, guest names and anything you type never leave your device this way. On the App Store this is declared as Usage Data (Product Interaction), not linked to you and not used for tracking. The app also records a single one-tap answer about whether you are planning your own event or plan events for others, which is sent the same way.
The signed-in web app at seatful.app/app sends the same kind of anonymous usage counts to our server, where we add them up per day. Each count says only that something happened a certain number of times on a given date in a given version of the web app, for example how many times a paywall was shown, a first event was created, or a purchase was completed. Like the iOS app's counts, they are stored with no account, device, installation or event identifier, no IP address and no free text, and nothing about your event contents or guests is sent. The web app sends them without cookies and without storing anything on your device. Only the signed-in web app sends them: our marketing pages, the guest-facing RSVP, share and seat-finder pages, and the free editor at seatful.app/try send none.
Marketing email
When you start a checkout on seatful.app, Stripe may show a checkbox asking whether you would like to be kept updated. It appears only where the law and our payment provider allow it, which today means customers in the United States. If, and only if, you tick that box, we may send you a single reminder when you do not finish that checkout, containing a link to pick up where you left off. If the box is unticked we send nothing, and we never add you to a marketing list without it.
Every marketing email names us and our postal address and carries an unsubscribe link that is free, works without an account, and needs no sign-in. We act on unsubscribes immediately. We keep a record of your consent and of the message we sent, because the law requires us to be able to show that consent existed. This is separate from account email such as sign-in codes and receipts, which we send in order to run the account you asked us for.
Cookies and local storage
Our marketing pages use no advertising or tracking cookies. The web app keeps you signed in using local storage in your browser, and uses only essential cookies for session and security. Because these are strictly necessary to provide a service you asked for, we do not show a consent banner. Our cookieless web analytics and the web app's anonymous usage counts store nothing on your device, so they do not change this. Full detail is on our Cookies and local storage page.
How long we keep data
- On-device data stays until you delete it or remove the app. The copy in your own iCloud stays until you delete the event, which removes it from all your devices, or until you remove Seatful's data from your iCloud storage settings.
- Account and synced data stays while your account is active. When you delete your account, we delete your account and the event documents you own, then remove them from our active systems within 30 days, except where we must keep limited records longer (see billing).
- Published RSVP and shared data stays until you remove it from the web or delete the event.
- Billing records (purchase and invoice data) are kept as long as required by tax and accounting law.
- Support messages are kept only as long as needed to resolve your issue and for our records.
- Marketing consent records (that you ticked the box, and which reminder we sent) are kept while your consent stands and for a period afterwards, so that we can show consent existed and can keep honoring an unsubscribe.
Your choices and rights
You control your data directly: edit or delete events and guests in the app, remove any published RSVP or shared data from the web, and delete your entire account and its data from within the app (Account, then Delete account) or by emailing us. Depending on where you live, you also have rights to access, correct, delete, port, restrict, or object to the processing of your personal information, and to withdraw consent. To make a request, email support@seatful.app. We will respond within the time the law allows. We do not sell or share personal information, and we do not use automated decision-making that produces legal or similarly significant effects.
Region-specific information
California
In the past 12 months we have collected the categories of personal information described above (identifiers such as email and name, customer records such as contact details and purchases, and other information you enter, including guest details). We collect it for the business purposes described above, from you and from your use of the Service, and disclose it only to the service providers listed above. We have not sold or shared (for cross-context behavioral advertising) personal information, and we do not. You have the right to know, access, delete, and correct your personal information, and to limit the use of sensitive personal information. We use and disclose sensitive personal information only for the purposes permitted by the California Consumer Privacy Act regulations (Cal. Code Regs. tit. 11, section 7027(m)), such as providing the service you requested, and never to infer characteristics about you. You may use an authorized agent, and we will not discriminate against you for exercising your rights. To exercise them, email support@seatful.app.
Canada
We handle personal information in line with PIPEDA, and, for Quebec residents, Law 25. Your data is stored and processed in the United States by the providers listed above. Transferring data to a provider for processing is a use of that data and not a sale; we remain accountable for it and use contractual and other means to provide a comparable level of protection, and as noted above it may be accessible to United States authorities. You may access or correct your information, and ask about our practices, by contacting our privacy officer at support@seatful.app. Our privacy officer is Brandon Rodrigues. A French-language version of this policy is available for Quebec users.
Australia and New Zealand
We handle personal information in line with the Australian Privacy Principles and the New Zealand Privacy Act 2020. As described above, we disclose personal information to overseas service providers in the United States. You may access or correct your information, or make a complaint, by contacting us; we will also notify you and the relevant regulator of an eligible data breach as required.
Japan
We handle personal information in line with the Act on the Protection of Personal Information (APPI). Our purpose of use is to provide and operate the Service as described above. Because we store and process your data in the United States, which is not on Japan's list of countries deemed to provide an equivalent level of protection, we obtain your consent to the cross-border transfer, and before we do we tell you the destination country (the United States), give information about its data-protection system, and describe the measures our providers take to protect your information, as the APPI requires. You may request disclosure, correction, or cessation of use of your personal information by contacting us. A Japanese-language version of this policy is available.
Mexico
For users in Mexico, this policy is our privacy notice (aviso de privacidad) under the Federal Law on the Protection of Personal Data Held by Private Parties. The controller (responsable) is Handler Labs LLC, at the address above. We process the personal data described here for the purposes described here: some processing is necessary to provide the Service, and some details are voluntary (for example, the dietary or allergy notes a guest chooses to add). You may exercise your rights of access, rectification, cancellation, and opposition (the ARCO rights), limit the use or disclosure of your data, or revoke your consent, by emailing support@seatful.app, and we will communicate any change to this notice on this page. A Spanish-language version of this notice is available.
Children
Seatful is intended for adults planning events, and is not directed to children. We do not knowingly collect personal information directly from a child. If you enter information about a guest who is a minor (for example, a child's name and meal on a guest list), you are responsible for doing so lawfully, including any parental consent required where you live. If you believe a child has provided us personal information directly, contact us and we will delete it.
Security
We protect data with HTTPS, database access locked to our server functions, a private per-event owner token, and access controls on our systems. No method of storage or transmission is perfectly secure, but we design to expose as little as possible.
Changes to this policy
If we make material changes, we will update the date at the top of this page and, where appropriate, note it in the app.
Contact
Handler Labs LLC, 5510 NW 38th Terrace, Coconut Creek, FL 33073, United States, support@seatful.app. See also our Terms of Use and Legal notice.