Legal
Privacy Policy
Last updated: May 26, 2026. This notice is designed for Mexico privacy expectations, including ARCO rights under the private-sector personal data framework.
Identity and Scope
This privacy notice applies to ab say hi, the digital invitation, RSVP, marketplace, ticketing, and event management platform. It describes how we process personal data from account owners, event organizers, guests, invitees, marketplace buyers, and site visitors.
Personal Data We Process
We may process names, email addresses, phone numbers if provided, account credentials, event details, invitation links, RSVP answers, guest notes, dietary or accessibility information added by the organizer or guest, gift marketplace orders, payment metadata, ticket and check-in records, device data, IP address, browser data, cookie preferences, and support messages.
Purposes
We use personal data to create accounts, build and publish invitations, deliver private invite links, manage RSVPs, operate event marketplaces, issue and validate tickets, process payments through Stripe or x402, prevent abuse, provide support, comply with legal obligations, and improve the platform when analytics consent is granted.
Legal Basis and Consent
Where Mexican privacy law requires consent, we request it through account creation, service use, payment flows, forms, or cookie controls. Sensitive information should only be added when needed for the event, and organizers are responsible for having a lawful basis to upload guest data.
Transfers and Processors
We do not sell personal data. We use service providers such as Firebase, Stripe, email delivery, hosting, analytics when approved, and blockchain or x402 infrastructure when selected. These providers process data only as needed to provide the service or comply with applicable law.
ARCO Rights
People in Mexico may exercise ARCO rights: Access, Rectification, Cancellation, and Opposition. You may also revoke consent or limit data use and disclosure. Send requests to privacy@ab-say-hi.com with your name, contact email, the right you want to exercise, and information needed to identify the relevant account, event, or invitation.
Retention
We keep account, event, guest, payment, and ticket records while the account or event remains active and for the period needed for legal, billing, security, backup, and dispute purposes. Deleted event data is removed from active systems and later purged from backups on regular retention cycles.
Cookies and Analytics
Required cookies keep sessions secure and cannot be disabled through the banner. Analytics cookies are optional and are only enabled after consent. You can clear your browser storage to reset your cookie choice, and future account settings may include a dedicated consent control.
Changes
We may update this notice when the platform, providers, law, or data practices change. Material updates will be posted on this page and may also be shown inside the app.