Consumer Health Data Notice

Last updated: October 12, 2026

This notice explains how Bonsai Tech LLC (“Fête”) handles information that some US state laws, including Washington’s My Health My Data Act and Nevada’s consumer health data law, treat as consumer health data. It adds to our privacy policy.

What we collect

Unless the host turns dietary questions off for their event, guests can choose options such as vegetarian, vegan, gluten-free, dairy-free, nut-free, halal or kosher when they RSVP. Some of these can suggest a health condition, such as an allergy or intolerance. Answering is always optional.

Why we collect it

Only so the host can plan food for their event. The guest chooses to share it with the host.

Who receives it

• The event’s host, in their dashboard, their guest-list export and their RSVP notification emails.
• The guest who gave it, on their invitation page and in their confirmation email.
• Our service providers, which store it and deliver those emails for us: Supabase (database) and Resend (email).

We never sell it, never use it for advertising and never send it to analytics or advertising providers. It never appears on public event pages.

How long we keep it

Until the guest clears it, or the host deletes the event or their account.

Your rights

You can change or clear your answer at any time from your invitation page, which withdraws your consent. You can also ask us to confirm whether we hold your consumer health data, give you a copy, tell you who received it, or delete it. Email mitul@bonsaitech.net from the address your invitation went to. We reply within 45 days. If we decline a request, you can reply to appeal, and if you’re still unhappy you can contact your state attorney general.