Last updated: July 16, 2026
This policy explains what personal data ANDAPAL (andapal.lat) collects, what we use it for, and what rights you have. It applies to both hosts (who create and purchase invitations) and guests (who receive an invitation or visit an event website).
The data controller is ANDAPAL DIGITAL, INC., a company incorporated in the Republic of Panama, tax ID (RUC) 155786691-2-2026 DV42, Operation Notice No. 155786691-2-2026-2026-574447319, domiciled in Panama City, Republic of Panama. Contact: hola@andapal.lat.
If you are a host (account): first and last name (and your partner's, if applicable), email, phone number, optional profile photo, and event details (date, location, text, photos). If you provide bank details for payment features, they are used only for that purpose.
Guest data (uploaded by the host): names, phone number, email, preferred language, group/category, companions and children (name and age), RSVP, comments, and whether the invitation was opened. This data is provided by the host and we process it on the host's behalf, solely to manage and deliver their event's invitations.
If you are a guest and RSVP on a public event website, we may ask for your name and phone number to match your RSVP to the host's list.
Technical data: we use only essential cookies (see section 6).
We do not sell your data or use it for third-party advertising.
Only with the providers required to operate the service, and only the minimum necessary:
These providers may be located outside Panama; in that case data is transferred solely for the purposes described.
The only data about minors we process is what the host uploads about their guests' children (name and age), for event logistics (headcount). We do not collect data from minors directly.
We use only essential cookies: your account session, the secure identification of your personal invitation (so your RSVP is attributed correctly), and your language preference. We use no analytics or advertising cookies. If this changes, we will update this policy.
We keep data while the host's account is active and for the contracted service period. You can request deletion of your account and its data at any time (section 8), except information we must keep for legal or accounting obligations.
Under Panama's Personal Data Protection Law 81 of 2019, you have the right to access, rectify, delete, and object to the processing of your data, and to request its portability. To exercise these rights, write to hola@andapal.lat.
If you are a guest and want your data removed from an event's list, you can ask the host or write to us directly.
We apply reasonable security measures: encryption in transit (HTTPS), hashed passwords, signed invitation tokens, and restricted access to data.
We may update this policy; the "last updated" date reflects the current version. Significant changes will be communicated on the site or by email.
Privacy questions? Write to us at hola@andapal.lat.