Moderation, private messages and replies
Content watches hold problems for you; signers can go private; celebrants can reply.
Content watches (profanity, explicit content, negativity) scan what signers write. A tripped signature is hidden immediately and lands in your review queue — approve to restore, reject to keep it hidden. Nobody else sees it while it waits.
Private messages: when enabled, a signer can mark their contribution "just for them" — only the celebrant (and you) ever see it. Cards holding private notes ask the celebrant to verify their email with a 6-digit code before opening.
Replies: celebrants can thank one signer or everyone. You choose whether reply-to-all goes out directly or waits for your OK.