Privacy Policy

1. Two roles

• For Couples (our customers) and for visitors of this site, we decide how the data is used: we are the controller.
• For Guests who open an Invitation and send an RSVP, the Couple who sent the Invitation decides, and we only process the data for them under the Data Processing Agreement. Guests should contact the Couple first; we help the Couple answer.

2. What we collect about Couples and visitors

• Account: your email address, and records of your sign-ins and sessions. If you choose “Continue with Google”, Google tells us only your email address and that Google has verified it; your Google password never reaches us. Google handles that sign-in under its own privacy policy.
• Invitation content: names, date, venue, schedule, family names, texts, photos and videos you add.
• Orders: what you bought, the amount and currency, the payment reference, and when you accepted the Terms and the DPA. Card details are handled only by our payment partner, never by us.
• Messages you send us through the contact, Bespoke or Personal Touch forms.
• Technical data: your IP address and server logs, used to keep the site secure and limit abuse.

You are not obliged to give us any data. Without an email address, however, we cannot save or publish an Invitation for you.

3. Why, and on what legal basis

• To provide the service you ordered and to email you about it (sign-in codes, order confirmation, warnings before deletion): performance of a contract (Art. 6(1)(b) GDPR).
• To keep the records of orders that tax and accounting law requires: legal obligation (Art. 6(1)(c)).
• To keep the service secure and to prevent spam and abuse: our legitimate interest in a safe service (Art. 6(1)(f)).
• To answer your messages: steps taken at your request before a contract (Art. 6(1)(b)), or our legitimate interest in answering enquiries (Art. 6(1)(f)).
• To handle reports about content, and legal claims: legal obligation and our legitimate interest in defending claims (Art. 6(1)(c) and (f)).

We do not sell personal data. We use no advertising or analytics trackers. We send no marketing emails. We make no automated decisions about you and do no profiling.

4. Guests’ data

When a Guest replies, we store their name, whether they attend, the number of people, the menu choice, their message, and their answers to any questions the Couple wrote for the reply form (answering them is voluntary; an answer may hold health data, such as an allergy, if the Guest chooses to give it). The Couple sees these in their Dashboard. The Guest’s browser keeps a small key so the Guest can change the reply later (see the Cookie Policy).

The Couple may also keep a guest list in their Dashboard: they type in or import their Guests’ names, whether each one is coming, how many people come and their menu choice, including answers a Guest gave them in person or by phone. Each reply sent online joins this list. If the Couple uses Guest Links, the names on the list are also used so that each Guest sees an Invitation addressed to them. People named or shown in an Invitation (for example parents and godparents) are also part of the content the Couple gives us.

We use this data only to show the Invitation and to pass the replies to the Couple.

5. How long we keep data

• Guest data and uploaded photos and videos: deleted automatically 3 months after the wedding date (the Retention Date).
• Photos and clips uploaded to an Invitation that is not published: deleted automatically one day after your last change to it. Its text is kept.
• The Invitation: deleted on the Retention Date, unless the Couple bought Keep Forever (then it stays online, without Guest data).
• Your account: until you delete it (“Delete account” in the editor) or ask us to, or 12 months after your last activity once none of your Invitations is online. Your Invitations, Guests’ replies and uploads are deleted with it.
• Order and invoice records: 7 years, as Austrian tax and accounting law requires, or longer where another law requires it.
• Contact and quote messages: up to 2 years after the last exchange.
• Withdrawal declarations: 3 years, the period in which claims about the contract can be brought.
• Server logs: up to 30 days. Records used to stop repeated sign-in attempts and spam (IP address or email address): one day.

6. Who receives data

We use these providers. They process data only on our instructions, under data processing agreements:

• Hosting and servers: Vercel Inc., USA (the site runs in Frankfurt, Germany)
• Database: Supabase Inc., USA (the database is in Frankfurt, Germany)
• Photo and video storage and delivery: Cloudflare, Inc., USA
• Emails about your account and orders: Resend (Plus Five Five, Inc.), USA
• Payments, VAT and invoices: our payment partner, named on the checkout page before you pay

Our payment partner sells you the order in its own name and is itself responsible for the payment data it collects.

Several of these providers are US companies. Where data reaches the USA, the transfer relies on the EU–US Data Privacy Framework if the provider is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses. You can ask us for a copy of these safeguards.

Fonts, images and films are served from our own site and storage: opening an Invitation sends nothing to advertising or social networks.

We disclose data to authorities or courts only where the law obliges us to.

7. Your rights

You have the right to get a copy of your data, to have it corrected or deleted, to have its use restricted, to receive it in a portable format, and to withdraw a consent you gave. You can object at any time to processing that relies on our legitimate interests (Art. 21 GDPR).

To use these rights, write to us through the contact form on this site (“Contact”, at the bottom of every page). We answer within one month.

You can also complain to a data protection authority, in particular in the country where you live. Ours is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at). In Romania it is ANSPDCP (www.dataprotection.ro).

8. Security

Data is encrypted in transit (HTTPS), and the database connection is encrypted too. Sign-in codes and sessions are stored only as one-way hashes. Each Couple can reach only their own Invitations and their own Guests’ replies. Uploaded photos have long random addresses that cannot be guessed or listed.

9. Children

The service is for adults. We do not knowingly collect data from children. A Couple who shows children in an Invitation is responsible for having the parents’ agreement.

10. Changes

We post changes here and, where they matter to you, tell you by email.