Privacy Notice

Collaub is operated by Collaub in the Philippines. We are the personal information controller for your account. For the guest list a coordinator builds, the coordinator decides whose details go in and why; we keep and process that list on their behalf, to run the event. Privacy requests go to [email protected].

When you sign in. Sign-in is through Google only. We receive your name, email address and profile picture — never your password or your contacts — and keep a session so you stay signed in.

Coordinators. The events you create: name, date, venue, the brief for suppliers, the programme, tasks, budget, the invitation, and the questions you ask guests. The guest list you add: names, and a contact (email or mobile) if you choose to enter one.

Clients (the couple, the debutante, the family). Your name and email, so the coordinator can invite you, and your decisions — approvals, notes, messages.

Guests. What you send through your invitation link: the names of the people in your party, whether each is coming, and your answers to the event’s questions (a meal choice, for example). On the day, the time your party checked in.

Suppliers. Your business listing (name, categories, service areas, packages, prices, photos), the quotes you send, your messages with coordinators, and the reviews you receive and reply to.

Supplier page visits. When you open a supplier’s page, the visit is counted for that business. We count a signed-in visitor by account and anyone else by a one-way code made from their internet address that changes every day — never the address itself. A supplier sees only the number, never who visited.

Waitlist. If you joined it: your email, and optionally your name, city and business.

On your device. A sign-in cookie, and a few small preferences in your browser’s storage (for example, which door phone is which on the event day). No advertising or tracking cookies.

• To run the event: invitations, replies, the programme, check-in at the door.
• To let the people planning it work together: approvals, tasks, messages, and the notifications that tell you something changed.
• To connect coordinators and suppliers: quote requests, quotes, bookings, and reviews that help the next coordinator choose.
• To keep the service secure and working, and to stop abuse.

• The coordinator sees everything on their event.
• The client sees the plan, the guest counts and what they are asked to approve — and the price the coordinator set, not the supplier’s own.
• A guest sees only their own invitation and their own party.
• A supplier sees the event’s name, date, venue and brief once asked for a quote; after they confirm a booking, only the counts the coordinator chose to share (headcount, meal counts, schedule). Never names, never the guest list, never the budget.
• The public sees a supplier’s listing and reviews, and an event page only if the coordinator publishes one — which carries no guest names.

We use a small number of providers to run Collaub:

• Google — sign-in.
• MongoDB Atlas — the database.
• Amazon Web Services (S3) — supplier photos.
• Our hosting provider and Cloudflare — the servers and the domain.

Some of these keep data on servers outside the Philippines. They process it only to provide their service to us, under their own security and privacy commitments.

• Deleting an event deletes its guest list, invitation links, replies, tasks, budget, programme, messages and check-ins straight away.
• Notifications are deleted automatically after 90 days.
• Your account stays until you ask us to delete it. Reviews you wrote stay on the supplier’s listing unless you ask us to remove them.

Under the Data Privacy Act you may ask to see the personal data we hold about you, correct it, have it deleted or blocked, object to how it is used, and get a copy of it. Write to [email protected] and we will answer within 30 days.

If you are a guest, the quickest way to change your reply is your own invitation link; to be removed from a guest list, ask the coordinator who invited you, or write to us.

If you are not satisfied with our answer, you may complain to the National Privacy Commission (privacy.gov.ph).

Data travels encrypted (HTTPS). Every event is walled off: each request is checked against who is on that event and in what role, so one coordinator, client or supplier cannot read another’s. Invitation links are long random codes, and a coordinator can replace one that was shared with the wrong person. No system is perfectly secure; if a breach affects you, we will tell you and the National Privacy Commission as the law requires.

Accounts are for adults. A guest list may name children who are coming — that is the coordinator’s and the family’s to decide, and it is used only for the event.

When this notice changes in a way that matters, we will update the date above and tell signed-in users in the app.