Privacy · The Olawuni Table

This is the Privacy Policy for The Olawuni Table ("we", "us", "our"), an invite-only gathering site run by Olamide and Alexandra Olawuni in Tampa, Florida. We collect only what we need to plan good meals together. If you ever have questions or want your data removed, write to hello@olawuni.table.

What we collect

When you sign in, RSVP, or fill out your profile, we collect:

Identity: full name, email address, optional phone number.
Sign-in records: Google profile info (if you sign in with Google) or magic-link verification metadata (if you use email).
Your preferences for the table: dietary preferences, allergies and their severity, drink preferences, and any kitchen notes you write.
Household details (optional): names, relationships, and notes for anyone you plan to bring along.
RSVPs: which gatherings you've responded to, your party size, menu choices, and dietary notes for that gathering.
Cookies: a first-party session cookie set by our sign-in system so you stay signed in between page loads.

We don't collect IP addresses for tracking, browsing history, location data, payment information, or anything else not listed above.

How we use it

To plan menus that work for everyone at the table (allergies and dietary needs).
To send you sign-in links, invitation emails, RSVP confirmations, and event reminders.
To show you your own upcoming invitation on the landing page when you sign in.
To let you edit your profile from one place.

We don't sell your information, run ads against it, or share it with third parties for marketing. Ever.

Who we share it with

We use a few service providers to keep the site running. Each sees the minimum necessary to do its job, and each is bound by their own privacy terms:

Vercel — application hosting (sees request metadata only).
Neon — managed PostgreSQL database (stores your profile and RSVPs).
Resend — transactional email delivery (sees your email address when we send you a sign-in link, RSVP confirmation, or reminder).
Google — sign-in (only if you choose Google to sign in; Google sees your email and basic profile info).

How long we keep it

Active profile: kept while you have an account.
Archived profile (admin hides you from the active guest list): kept with your event history; not deleted automatically.
Deleted account: your name, email, phone, household notes, allergies, and preferences are replaced with anonymous placeholders within 24 hours. Past RSVPs remain attached to the anonymized profile so kitchen logs stay consistent, but the original PII is gone.
Email send log: we keep a record that we sent a specific kind of email to a given address on a given day for 12 months, for delivery auditing.

Your rights

You can, at any time:

See your data — visit your profile page. Everything we have on you is shown there.
Edit your data — changes save automatically when you update the profile page.
Download your data — use the "Download my data" button on the profile page. You'll get a JSON file with everything we have on you.
Delete your account — use the "Delete my account" button on the profile page. Your personal details are anonymized within 24 hours.
Opt out of open invitations — set "Open invitations" to off on your profile. Private invitations come whether or not this is on, because we send those to you directly.

If you're a resident of a state or country with stronger privacy rights — for example California (CCPA/CPRA), Colorado, Connecticut, Utah, Virginia, the European Economic Area, the United Kingdom, or anywhere else with a "right of access" or "right to erasure" — the mechanisms above satisfy those rights. If you want to exercise any other right, write to hello@olawuni.table.

Cookies & tracking

We set exactly one cookie: a session cookie from our sign-in system so you stay signed in between page loads. It's first-party, expires when your session does, and uses the standard HttpOnly, Secure, and SameSite=Lax attributes.

We don't use analytics, advertising, social-media, or any other third-party tracking technology. There's no "Accept cookies" banner because there's nothing to consent to beyond what's strictly necessary to keep you signed in.

Children

The Olawuni Table is for adults inviting other adults. We don't knowingly collect information from anyone under 13 (per the U.S. Children's Online Privacy Protection Act). If you believe a child has provided information to us, write to hello@olawuni.table and we'll delete it.

Security

All traffic is encrypted in transit (HTTPS).
Secrets are stored in our hosting provider's encrypted vault, never in source code.
Database access is restricted to our application.
We don't store passwords. Sign-in is via Google OAuth or one-time magic links only.
Session cookies use HttpOnly so they can't be read by browser scripts, and SameSite=Lax so they aren't sent on cross-site requests.

No system is perfectly secure. If you suspect a security issue, write to hello@olawuni.table and we'll look into it within 72 hours.

Changes to this policy

If we make material changes, we'll update the "Last updated" date above and let signed-in guests know on their next visit. Continued use of the site after that means you accept the updated policy.

Contact

Olamide & Alexandra Olawuni
hello@olawuni.table
Seminole Heights · Tampa, Florida