Your gathering. Your privacy.

GatherRibbon is an early access invitation service. Anyone can browse the site; hosts sign in to save and manage invitations.

What we store

For hosts, we use the signed-in account identifier to keep event records separate. Saved favorite designs belong only to your account; use the heart control to remove a favorite. We store the event details, optional invitation photo, and the guest replies associated with each event. Guest replies may include a name, optional email, attendance choice, party size, and optional note.

Draft saving and recovery

While you are signed in, draft edits save automatically to your account. Drafts remain private to you. The editor also keeps a temporary recovery copy in this browser tab so a reload or failed save does not immediately lose your changes. Recovery copies are separate for each account and invitation and clear when those changes have saved. Closing the tab or clearing browser storage can remove this temporary copy. Before signing in, edits stay in the tab; choosing Sign in to save transfers that draft to the account you sign in with. Changes to published invitations require an explicit Save changes action.

Who sees what

Published invitation details and their photos are intended to be visible to anyone with the invitation link. These links are not listed in a public directory. Guest names, emails, and notes are available only to the event host. A link is not a password: do not include confidential information in an invitation.

Cookies and external services

Sign-in uses ChatGPT authentication. An essential browser cookie remembers your own RSVP so you can update or remove it on that browser. Events and photos use Cloudflare storage through Sites hosting. We do not add advertising trackers. Fonts are served by the site; directions open Google Maps only when selected.

Guest replies and deletion

Use “Remove my reply” on the invitation to delete a reply from the browser you used to submit it. If you have lost that browser cookie, contact the host. Hosts can delete an entire event and its guest replies from My events. No invitation emails or marketing emails are sent by this version.

Photo retention

When a saved photo is removed or an event is deleted, we attempt to delete its photo if no other event uses it. Unattached uploads older than 24 hours are cleaned up when the same host next uploads a photo. A photo not attached to a published event is visible only to its uploader. Cleanup failures can delay removal; a complete retention and support policy must be established before public commercial launch.

Before paid launch

The business owner must provide the operator’s identity, support contact, retention periods, and any additional region-specific privacy terms. Payments are not currently active.

Payments and receipts

When paid plans are enabled, Stripe collects the payment details, billing address and payment email on its checkout page. GatherRibbon stores order identifiers, the host account identifier, an event title snapshot, purchased plan, currency, amount, status, Stripe payment references, refund amount and receipt link. We do not store card numbers, security codes or billing addresses. Stripe processes payment information under its privacy policy.

Payment records are kept separately from events for reconciliation and refund support, so deleting an invitation does not delete its transaction history. The operator must establish financial record retention periods before commercial launch.