Privacy Policy

What this policy covers

Find Your Table, operated by XPIT L.L.C, is software that lets a host create an event, add their guest list with table assignments, and share a QR code so guests can look up their own table. XPIT L.L.C is the operator and data controller for the service. This page explains, in plain English, what information we hold and why. It is written to be honest and practical rather than to cover every legal edge case.

Information we collect

• •Host account email. When you sign in we collect your email address. It is used to send your login code and to identify your account.
• •Event details. Hosts create events and enter details such as the event name and date.
• •Guest information. Hosts add or import guest names and their table assignments so guests can find their seat.
• •Optional host-only fields. A host may add private details to a guest, such as a group, dietary note, or general note. These are for the host's own planning.

What guests can see

The public guest page only lets a guest search for their name and see their table result. It does not display your full guest list.

Host-only fields — group, dietary, and notes — are not shown on the public page. They stay private to the host unless that ever intentionally changes in a future version, which we would describe clearly before doing so.

How your data is stored

Account, event, and guest data is stored using Supabase, our database and authentication provider.

Email login codes are sent through Supabase Auth. In production, delivery of those emails may be handled by an SMTP provider such as Resend.

How we use the information

We use your information to operate the service: to log you in, to store the events and guests you create, and to power the public name-to-table search for your guests. We do not sell personal data.

Analytics and measurement

We use privacy-friendly product analytics and marketing measurement to understand which pages are useful and how people find us. It stays OFF until you accept it, wherever you are and whichever language you read this site in; the language you choose is not treated as consent or as a sign of your location. You can change or withdraw your choice at any time using the “Privacy choices” and “Advertising choices” controls in our site footer. We never collect guest names, guest emails, search terms, table assignments, event names, or photos for measurement.

If you accept analytics, we also send our short campaign code from the link you followed to PostHog with the first page view reported by that page load. This helps us count visits from each campaign. It includes no full URL, advertising click identifier or guest data, and adds no campaign cookie. If you accept after navigating within the site, the code accompanies that later page view. Reloading a tagged link can count another visit; this is not a count of unique people. The public guest page is excluded.

We keep a first-party cookie noting basic marketing context for your first visit — such as a campaign or ad-click reference, the referring site, the page you landed on, your approximate country, and your device type. We set it ourselves, and no script in your browser can read it. Nothing is written to your device before you make an affirmative choice, in any country or language: those details stay in the memory of the browser tab you have open and are stored only if you accept. Nothing in the cookie is sent to an advertising network unless you have accepted advertising cookies. If you go on to create a host account, that one-time snapshot is saved with your account so we can understand which channels bring hosts to the product; it is never updated again, and it never includes guest data. Unless you had accepted measurement (and have not since refused it) before creating your account, that snapshot is not saved. Our Cookie Policy describes this cookie in full.

Measurement runs on our marketing pages, our sign-in page, and your host dashboard. The public guest page is excluded: no analytics or advertising tool loads or runs there, and nothing about a guest's visit is sent to one. A guest who scans a printed QR code is not asked to make a choice because there is nothing to choose about.

So that a host can see their guest page is working, we do count a few coarse milestones for the event itself — that the page was opened, and that a search found a table. These are recorded on our own servers, attached to the event rather than to the guest, and shown only to the host. They never include the name that was searched, the table that was shown, or anything identifying the guest, and they are never sent to an analytics or advertising provider.

On our marketing pages and your host dashboard we may also capture masked session recordings to see where the experience is confusing. These recordings mask all on-screen text and every input field by default, and additionally block sensitive elements such as your account email, so guest and account details are not legible in them. We do not record session replays on the sign-in page, on unsubscribe pages, or on the public guest page where guests look up their seat.

If you are a signed-in host, we may attach your own account email to your analytics profile so we can recognise and support your account. This applies only to the host's own email — never to any guest's name, email, or table.

Business outreach contacts

Separately from the service itself, we occasionally contact wedding and event businesses, such as planners, venues and stationers, by email or Instagram message about FYTABLE. This section explains how we handle those business contact details. No guest data is involved.

• •Who is responsible. XPIT L.L.C, which operates Find Your Table (FYTABLE), 34 N Franklin Ave Ste 687 #5110, Pinedale, WY 82941, USA. Contact: support@findyourtable.app.
• •What we hold. The business name, the work email address or Instagram handle it publishes, the public website or page where we found it, and short notes on the services it lists there.
• •Where it comes from. Only from the business's own public website or its public business social media profile.
• •Why we use it. To send occasional business-to-business messages about FYTABLE that are relevant to your wedding or event work. Our legal basis is our legitimate interest in telling relevant businesses about our service (Article 6(1)(f) of the GDPR and the UK GDPR). In Canada, we only write to addresses a business has published itself, without a statement that it does not want unsolicited messages, and only about matters relevant to its business.
• •Who processes it for us. Our email sending tool, Instantly, and Google Workspace. Your data may be processed in the USA.
• •How long we keep it. Until you opt out, and at most 24 months after our last contact with you. If you opt out, we keep your email address or handle on a suppression list so that we never contact you again.
• •Your rights. You can object or opt out at any time by replying “no thanks” or by emailing support@findyourtable.app. You can also ask for access to, correction of or erasure of your data, and you have the right to complain to a data protection supervisory authority, for example the one where you live or work, such as the ICO in the UK or the CNIL in France.
• •What we never do. We do not sell this data, and it never includes guest data.

Your choices and requests

You remain in control of the data you add. If you would like us to help delete, export, or correct your account or event data, contact us at support@findyourtable.app and we will help.

If you add guest information, please make sure you have a fair reason to do so and only include what you need for seating.

Changes to this policy

As the product grows we may update this policy. If we make a meaningful change to how guest or host data is handled, we will update this page.

Contact

Questions about privacy? Email us at support@findyourtable.app.