How we protect your data

AQDERA is an early-stage product. This page explains current product practices; it is not a compliance certification or a substitute for a company-specific legal agreement.

Host account isolation

Your invitations and guest RSVPs belong to your host account. Row Level Security policies prevent other hosts from reading your drafts, receipts, or guest responses.

Least-privilege access

Access depends on sign-in. Browser clients use the publishable Supabase key only. Service-role secrets are never placed in the browser.

We do not sell data

We do not sell invitation content, guest RSVP details, or host contact data, and we do not use guest contacts for AQDERA marketing.

Payment proofs

CliQ receipt uploads are stored privately for review. Hosts can resubmit after a rejection. Publishing stays payment-gated until an admin approves a valid receipt.

Infrastructure providers

Application data is stored using Supabase and the interface is deployed through Netlify. Invitation photos and music are publicly retrievable when their URL is known so guests can view the invitation; payment receipts remain private.

Retention and deletion

A host can request correction or deletion of invitation data. AQDERA does not automatically delete production records without verified authority and scope.

Terms · Cancellation requests · Contact

Before going live

Start with a draft and preview, review guest-facing wording carefully, and only publish after payment approval. Questions: joqqq811@gmail.com