Privacy Policy

e-invitation wedding ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding website platform and related services (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you sign in with Google, we receive your name, email address, and profile picture from Google.

Wedding Details

To provide the Service, we collect information you enter about your wedding, including partner names, wedding date, venue details, event schedules, wedding party members, FAQs, registry links, and any photos or media you upload.

Guest Information

You may upload or enter guest names, email addresses, phone numbers, mailing addresses, dietary restrictions, RSVP responses, and group/household assignments. You are responsible for having appropriate consent from your guests to share their information with our Service.

Usage Data

We automatically collect information about how you interact with the Service, including IP addresses, browser type, device information, pages visited, referral URLs, and interaction timestamps. This data is collected through server logs and analytics tools.

2. How We Use Your Information

• Providing the Service — Creating and hosting your wedding website, managing guest lists, processing RSVPs, and delivering invitations.
• Communications — Sending transactional emails (account confirmation, password resets, RSVP notifications) and, with your consent, optional SMS notifications to guests.
• Analytics & Improvement — Understanding how the Service is used to improve features, performance, and user experience. We use aggregated, anonymized data for this purpose.
• Security — Detecting and preventing fraud, abuse, and security incidents. We maintain audit logs of security-relevant events.
• Legal Compliance — Meeting our legal obligations and responding to lawful requests from authorities.

3. How We Share Your Information

We do not sell your personal information. We share data only with the following third-party service providers, strictly as necessary to operate the Service:

• Stripe — Payment processing. Stripe receives your payment card details and billing information directly. We do not store card numbers. See Stripe's Privacy Policy.
• Resend — Email delivery. Recipient email addresses and message content are shared to send transactional emails on your behalf.
• Twilio — SMS delivery. Guest phone numbers and message content are shared when you choose to send SMS notifications.
• Amazon Web Services (S3) — File storage. Photos, images, and media you upload are stored on AWS S3 servers.
• Sentry — Error monitoring. Technical error data (which may include anonymized usage context) is sent to Sentry to help us identify and fix issues.
• Google — Authentication. If you use Google Sign-In, authentication data is exchanged with Google.

4. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Essential Cookies — Authentication session tokens, CSRF protection, and security cookies required for the Service to function. These cannot be disabled.
• Analytics — We may use analytics tools to understand usage patterns. Analytics data is aggregated and does not personally identify you.

We do not use advertising cookies or share data with advertising networks. You can control cookie settings through your browser preferences.

5. Data Retention

We retain your account data and wedding information for the duration of your account plus twelve (12) months after your wedding date, whichever is later. This grace period allows you to access your wedding website and data after the event. After this period, your data will be automatically deleted unless you request earlier deletion. You may request deletion of your account and all associated data at any time through your account settings or by contacting us.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of inaccurate or incomplete data.
• Deletion — Request deletion of your account and all associated data. This action is irreversible and includes your wedding website, guest lists, RSVPs, and uploaded media.
• Export — Export your guest list and RSVP data in CSV format through the dashboard.
• Objection — Object to processing of your data for certain purposes.
• Portability — Request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at the email address listed below. We will respond to your request within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), secure session management, input validation, rate limiting, file upload validation, and security audit logging. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States and Canada, where our service providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: [email protected]