TableWhisperer helps organizers seat their guests at any event, and lets guests find their table. This page explains what personal data we handle, why, and what your rights are.
Who we are
TableWhisperer is published by Rebecca Mason EI, an individual entrepreneur (micro-entreprise) trading as BeautifulWorldInteriors, SIRET 891 456 592 00031, 1 impasse de la Châtaigneraie, 79110 Valdelaume, France. The publisher is the controller of the personal data described on this page.
For any question or request about your data: contact@tablewhisperer.com.
What we collect, and why
- Your organizer account: your name, your email address, and either your password (stored only in hashed form) or, if you sign in with Google, your Google account ID. We don’t store your Google profile picture.
- Your event: its name, venue and date, your tables, and your guests’ names, notes, seats and optional photos.
- Your sign-in: a random session identifier, so that you stay signed in. We don’t keep your IP address or your device type.
- Emails: we only send account emails (address verification, password reset). No newsletter, no tracking.
We use this data to provide the service you signed up for (legal basis: performance of a contract), and to keep it secure and prevent abuse (legal basis: legitimate interest).
Guests use the guest page without an account. It sets no cookies, and what they type in the search isn’t stored. Their IP address is held in memory for a few minutes to limit abuse, and is never recorded.
No advertising, no analytics, no tracking. We never sell or share your data.
Guest data: the organizer’s responsibility
When you add guests, you decide what to enter: you are the controller of your guests’ data, and we process it on your behalf, only to provide the service.
Once you publish the guest list, anyone with your event’s link or QR code can search it and see the names, tables and photos. Make sure your guests agree to appear on it, especially for photos.
A guest who wants their name or photo removed can ask the organizer, or write to contact@tablewhisperer.com: we will pass the request on or remove the data.
Who processes the data
- Scaleway (France): hosting of the server and its database, in the European Union. The server is administered by a technical administrator acting on our behalf.
- OVHcloud (France): sending account emails.
- Google: only if you choose to sign in with Google. Google confirms your identity and gives us your name, email address and account ID. Google’s own privacy policy applies.
- Google Play and the App Store: purchase of the app. We don’t receive your payment details.
Where the data is stored
All data is stored in the European Union. Nothing is transferred outside it, except what Google processes when you choose to sign in with Google (Google LLC, United States, under the EU–US Data Privacy Framework).
How long we keep it
Your data is kept until you delete it. Deleting an event deletes its tables, guests and photos. Deleting your account (in the app: Settings → Account settings) deletes everything, immediately.
Backups are kept for 30 days: deleted data disappears from them within 30 days. We don’t keep access logs with IP addresses.
Your rights
You can access, correct, export or delete your data, object to its processing or ask us to restrict it. In the app you can see and edit your event and delete your account; for anything else, write to contact@tablewhisperer.com. We answer within one month.
You can also file a complaint with the CNIL (cnil.fr), the French data protection authority.
Security
Everything travels over HTTPS. Passwords are stored only in hashed form. Each organizer can reach only their own events. Sign-in, emails and the guest search are rate-limited.
Children
Organizer accounts are for people aged 15 or over (the age of digital consent in France).
Changes
If our practices change, we will update this page. The date at the top shows its latest version.