Your information stays under your control.

1. Scope

This Privacy Policy explains how Guestlistr, operated by RadLabs LLC, collects, uses, discloses, and protects personal information through guestlistr.vip, its guest-list tools, and related communications. It does not govern independent venues, event operators, Instagram, calendar providers, or other third parties.

2. Information we collect

We collect information you provide, including your email address, account type, referral code, account credentials processed by our authentication provider, and, as you continue onboarding, your name, mobile number, Instagram username when relevant, optional gender identity, age confirmation, home and preferred cities, role-specific profile details, invitation preferences, selected events, consent choices, and communications with us. We create operational records such as onboarding progress, application status, decision reason, review timestamp and note, referrals, RSVPs, check-ins, dinner attendance reports and their review history, unsubscribe status, message delivery status, calendar subscription tokens, private experience ratings, rating disputes, safety reports, and operator review records.

Public application records do not include your IP address in member or Promoter workspaces.

We may also receive referral codes and basic technical information needed to deliver, secure, and troubleshoot the service, such as request timestamps, browser or device information, and security logs. When you follow an event, ticket, or reservation link, we record the event, destination, referral partner or campaign, and time of the click for attribution and service analytics. This click record does not include your IP address or a persistent advertising identifier. We do not ask you to upload a government ID, payment card, precise location, or private Instagram credentials. The current service uses city-level preferences and travel dates, not continuous GPS tracking or a precise movement history.

Promoters may upload contact records to stage individual Guestlistr invitation links. An upload does not create marketing consent or make the contact messageable. The person must submit their own application and communication choices before they become an opted-in Member connected to that Promoter.

3. How we use information

We use personal information to process applications, deliver requested calendar setup links, understand our membership, review the public Instagram profile and optional photo you identify, curate city-relevant invitations, recommend audiences based on selected cities and active travel windows, manage guest lists and capacity, administer the complimentary dinner attendance policy, operate referrals and calendars, measure outbound referral performance, send promotional communications only when selected, honor opt-outs, detect abuse, secure the service, analyze attendance and service quality, review disputes and safety concerns, comply with law, and establish or defend legal claims. Optional gender information is not shown to ordinary Promoters and is not an automatic eligibility gate.

Spender table requests store the requested city, date, venue or vibe, group size, optional budget range, notes, assigned Promoter, and coordination status. Guestlistr does not collect payment for these requests. A Promoter contacts the Spender directly to confirm venue availability and coordinate the table.

4. Instagram review and fair treatment

We use the submitted Instagram username to locate and review the associated public profile for authenticity, fraud prevention, event fit, community curation, and safety. We do not ask for your password or access private content. Review does not guarantee approval or admission. We do not use protected characteristics as a basis for unlawful discrimination.

5. How we disclose information

We may disclose the minimum information reasonably needed to venues, event operators, and authorized hosts to manage applications, admission, safety, and attendance. We also use service providers that host the application and database, authenticate accounts, deliver verification and recovery email, deliver email or SMS when enabled, and provide calendars or infrastructure. These providers process information for their services and may have their own policies.

Access depends on role. Promoters can view operational information for the Members and invitations connected to them. Authorized hospitality personnel can view information needed to approve Members, Promoters, guest lists, and event operations. Ordinary participants do not see another person's contact details, private notes, rating author, or safety-report details. Administrators may review restricted records to investigate safety concerns, disputes, fraud, or policy violations.

We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect a person's safety, investigate fraud or abuse, enforce our terms, or complete a merger, financing, acquisition, or sale subject to appropriate safeguards. We do not sell personal information or share it for cross-context behavioral advertising.

6. Messaging choices

Email and SMS choices are recorded separately. SMS marketing requires your affirmative selection and is not a condition of admission or purchase. Reply STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE to withdraw SMS consent. Use the unsubscribe link in a marketing email to stop email invitations. We may retain suppression records so we do not contact you again through a channel you stopped.

7. Calendar privacy

Your private calendar subscription URL is an unguessable bearer link. Anyone with the link may be able to view the Guestlistr events connected to it. Do not share it. Contact privacy@guestlistr.vip to revoke or replace a calendar link.

8. Retention

We keep active account, profile, invitation, and event records while you use Guestlistr. Routine operational logs are generally retained for up to 24 months. Unresolved disputes, safety reports, fraud prevention records, payment records, and records subject to a legal hold may be kept longer when reasonably necessary for the applicable review or legal obligation. Backups are isolated from normal use and expire through the ordinary backup rotation.

Experience ratings are tied to a verified check-in and their scoring weight expires after 180 days. Consent and opt-out evidence is kept only as long as needed to demonstrate and honor the choice, including suppression records that prevent unwanted contact. Safety reports are handled separately from experience ratings and do not change a reputation score.

When an account is deleted, we remove authentication access, profile photos, contact details, bearer links, and other direct identifiers. We also remove or anonymize content the account holder supplied. We may retain a minimal, non-identifying operational record and any specific record we are legally required to maintain. Retained records are no longer used for invitations, marketing, personalization, or reputation scoring. We disclose any applicable exception when the deletion is confirmed.

9. Security and incidents

We use administrative, technical, and organizational safeguards designed for the nature of the information we process. No system is completely secure. If a security incident requires notice, we will provide notice as required by applicable law.

10. Your choices and requests

You may request access, correction, deletion, or a copy of your information, withdraw consent, or ask a privacy question through our privacy request form or by emailing privacy@guestlistr.vip. We may verify your identity before completing a request and may retain information when required by law, needed for security, or necessary to honor an opt-out. Deletion may take up to 45 days. We confirm completion and describe any legally required retention that applies. You may appeal a denied privacy request by replying to our decision with the word "appeal."

11. Age and location

Guestlistr is intended only for people age 21 or older and is operated for events in the United States. We do not knowingly collect information from anyone under 21. If you believe an ineligible person submitted information, contact us.

Nearby recommendations are optional. You can decline them and still apply, update your city or travel preferences, or withdraw permission through a privacy request. If a future app offers device location, it will request permission at the time of use and explain whether access is one-time, while-in-use, or background.

12. Changes and contact

We may update this policy as the service changes. We will post the revised effective date and provide additional notice when required. Contact privacy@guestlistr.vip with privacy requests or concerns.