Privacy policy

This policy belongs to Citas: the website citas.posxml.com and the Citas app for Android and iPhone, which event offices use to create their invitations and keep their guest lists. Questions: moufidghasham76@gmail.com.

Each office that uses Citas is responsible for the data of its clients and guests; Citas stores and processes that data only on the office’s behalf.

What the app collects: the email address of the office staff member, used to sign in, and their session, stored encrypted in the phone’s keychain. With that session the app shows the office’s events and guests: each guest’s name, language and reply. The app does not add guests, does not read the phone’s contacts and does not ask for location, camera or photos.

What the website stores: for staff, name, email, phone number and profile photo; for guests, the name, phone number, email and language entered by the office, and what each guest replies: whether they will attend, how many they are, their message and their preferences for the event. Each session records the IP address and browser it was opened from, and is deleted when it expires.

Why: to show and send the invitations, receive the replies, arrange the tables and the entrance, and notify guests by WhatsApp or email when the office asks for it.

Who receives it: the servers where Citas runs and the providers that deliver the emails and WhatsApp messages, which use it only for that. It is never sold or given away. There is no advertising or tracking: no ad cookies and no third-party analytics.

How long: for as long as the office keeps its account, or until it deletes the event. Sign-in codes and expired sessions are deleted automatically.

Security: everything travels encrypted; codes, sessions and passwords are stored hashed, and service keys are stored encrypted.

Your rights: you can ask to see, correct or delete your data. If you are a guest, ask the office that sent you the invitation, or write to us at moufidghasham76@gmail.com and we will pass it on.

This policy may change; the current version is always the one on this page.

Delete your account

How to delete a Citas account (the app for Android and iPhone and the website citas.posxml.com) and what is deleted.

Accounts are not created in the app: each office adds its own staff. To delete yours, open “My account” in the app and tap “Delete my account”: it is deleted straight away. If you are your office’s only administrator, you first need to name another one, so the office is not left with nobody to run it. You can also write to moufidghasham76@gmail.com from your account’s email address with the subject “Delete my account”, or ask your office administrator; in that case we delete it within 30 days and let you know when it is done.

What is deleted: the account, your name, email, phone number, photo and sessions. It can no longer be used to sign in.

What is kept: whatever the law requires us to keep, such as payments, stays on record. Events and guest lists belong to the office: they are deleted when the office deletes them or closes its account.