Last updated: November 20, 2025
1. Introduction
Wedding Planning Assistant ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding planning service ("Service").
We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information You Provide
We collect information that you voluntarily provide, including:
- Account Information: Name, email address, password, phone number
- Wedding Details: Couple names, wedding date, venue information, event preferences
- Guest Information: Names, email addresses, phone numbers, dietary restrictions, meal preferences, seating preferences
- Vendor Information: Business details, contact information, service descriptions, pricing
- Payment Information: Billing address, payment method details (processed securely by Stripe)
- Communications: Messages, notes, and any other content you create within the Service
2.2 Information Collected Automatically
When you access our Service, we automatically collect certain information:
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent, click patterns
- Log Data: IP address, access times, referring URLs
- Cookies and Similar Technologies: See our Cookie Policy for details
2.3 Information from Third Parties
We may receive information from:
- OAuth Providers: Google account information when you sign in with Google
- Payment Processors: Transaction status and billing information from Stripe
3. How We Use Your Information
We use your information to:
- Provide and maintain our Service
- Process your subscription and payments
- Enable wedding planning features (guest lists, RSVPs, seating)
- Send transactional emails (confirmations, reminders, updates)
- Respond to your inquiries and support requests
- Improve and personalize the Service
- Detect and prevent fraud and abuse
- Comply with legal obligations
- Send marketing communications (with your consent)
4. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Contract Performance: Processing necessary to provide the Service you requested
- Legitimate Interests: Improving our Service, fraud prevention, security
- Legal Obligations: Compliance with applicable laws and regulations
- Consent: Marketing communications and optional data processing
5. Data Sharing and Disclosure
5.1 Third-Party Service Providers
We share data with trusted service providers who help us operate our Service:
- Supabase: Database hosting and authentication
- Stripe: Payment processing
- Vercel: Application hosting
- Email Service Providers: Transactional and marketing emails
- Analytics Providers: Service usage analytics
5.2 With Your Consent
We may share your information with third parties when you explicitly consent, such as when connecting with vendors in our directory.
5.3 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights and the safety of others.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
6. Data Retention
We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy:
- Active accounts: Data retained while your account is active
- After account deletion: Data deleted within 30 days, except where retention is required by law
- Subscription records: Retained for 7 years for tax and accounting purposes
- Usage logs: Retained for up to 12 months for security and analytics
7. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit (TLS/SSL) and at rest
- Secure authentication and access controls
- Regular security assessments and updates
- Employee training on data protection
- Incident response procedures
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
8. Your Rights (GDPR)
If you are in the European Economic Area (EEA), you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, contact us at privacy@planning.wedding. We will respond within 30 days.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Data processing agreements with our service providers
- Compliance with applicable data transfer regulations
10. Children's Privacy
Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
11. Marketing Communications
We may send you marketing communications about our products and services with your consent. You can opt out at any time by:
- Clicking the "unsubscribe" link in any marketing email
- Updating your preferences in account settings
- Contacting us directly
You will continue to receive transactional emails necessary for the Service (e.g., payment confirmations, security alerts).
12. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last updated" date
- Sending an email notification for significant changes
Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Data Protection Officer
For questions about this Privacy Policy or our data practices, contact our Data Protection Officer:
Email: privacy@planning.wedding
15. Supervisory Authority
If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
16. Contact Information
For any questions about this Privacy Policy, please contact us:
Email: privacy@planning.wedding
Support: support@planning.wedding