Privacy policy

Version 2026-09-30

Lahza builds event websites. This explains what we hold, why, and what you can do about it. It is written to be read, not to be survived.

What we hold

From you: your name, email address, an optional phone number, and everything you enter about your event — names, dates, a venue, a message, photos. From your guests: whatever you put on your guest list, and their reply if they give one. From payment: the amount, the outcome and a reference from the payment provider. We never see or store card numbers.

Why we hold it

To build and serve your event website, to send you what you asked for, and to keep the records the law requires of a business that has taken money. We do not sell it, and we do not use it to advertise to you.

About your guests

The details on your guest list came from you, not from them. We use them only to produce each guest their own invitation link, and to record what you sent and what they replied. We do not contact your guests for our own purposes, ever.

Photos guests add

Where guest photo uploads are switched on, every photo is reviewed before it appears anywhere, and location data is removed from it before it is stored. A photo that is not approved is deleted rather than kept.

Optional analytics

If you allow it, we use PostHog to count page visits, sign-ups, purchases, site creation, errors, and AI usage totals so we can improve Lahza. We may also use Meta Pixel to measure advertising effectiveness if it is enabled. These services may process device and visit information. We also measure anonymous creation steps, relative clicks and scroll reach, without recording your screen. We do not send form values, private links, uploaded media, event text, guest details, AI prompts or generated content. Analytics stays off until you allow it, and you can change your choice below at any time.

How long we keep it

An unfinished page that nobody comes back to is deleted after 90 days, and we email you twice before that happens. A site started without an account is deleted after 10 days without changes, unless you sign in to keep it. A published event stays up as a keepsake. Invoices are kept for as long as tax law requires, with your name removed if you close your account.

What you can do

You can download everything we hold about you at any time, from your account page, as a file you can actually read. You can also ask us to delete your account. Deletion waits 30 days before it happens, so that you can change your mind, and you can cancel it at any point in those 30 days. After that it cannot be undone.

Keeping it safe

Guest links are long random tokens that cannot be guessed. A wrong one is answered as though the event does not exist, rather than as though you got the password wrong. Your event pages are never indexed by search engines.

Analytics choice

Current choice: Not chosen

Asking us something

Write to [email protected] and a person will answer.