Legal
Last updated: October 2026
The Private Wedding App (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains what data we collect, who we share it with, how long we keep it, and your rights over it.
When you create an account and use The Private Wedding App, we collect: • Account information: your name, email address, and password. • Wedding details: names, wedding date, venue, schedule, guest list, RSVP responses, seating plans, budget entries, vendor notes, and other wedding content you provide. • Guest information you or your guests enter: names, contact details where given, attendance, meal choices, dietary requirements and allergy information, plus-one details, song requests and messages. • Media: photos and videos you upload for your invitation, moodboard, guest photo sharing, or the venue watercolor tool. • Payment information: processed by Stripe. We never see or store your full card details. • Assistant conversations: the questions you ask our in-app AI assistant and the answers it gives. • Technical data: IP address, device type, browser, and pages visited, used for security, abuse prevention, and measurement. • Contact form submissions: your name, email, and message. Some of this is sensitive. Dietary requirements and allergy information are health data, which receives special protection under Article 9 of the GDPR. We collect it only because you or your guests choose to provide it so that catering can be arranged safely, we use it for no other purpose, and we never use it for marketing or profiling.
We use your information to: • Provide and maintain your invitation, RSVP system, and planning tools. • Power the in-app AI assistant and the one-click invitation translation. • Send account-related communications such as purchase confirmations, RSVP confirmations, and support replies. • Keep the service secure and prevent abuse. • Respond to your enquiries. • Measure how our advertising and website perform, and improve the product. We do not sell or rent your personal information. We do share limited data with advertising and analytics providers for measurement, which is described in section 3 and section 7, and which you should read before deciding whether to use the service.
We use the following processors and third parties. Each receives only the data needed for its function. Infrastructure and operations • Supabase: database and authentication. Stores your account, wedding, and guest data. • Vercel: hosting. Serves the application and processes request data including IP addresses. • Stripe: payments. Handles card details and billing information directly. • Resend: transactional email. Sends account, RSVP confirmation, and support emails. Artificial intelligence • Anthropic: powers the in-app AI assistant and the invitation translation feature. When you use the assistant, a snapshot of your wedding is sent to Anthropic so it can answer with your real data. That snapshot can include guest names, attendance, meal choices, allergy flags, budget figures, checklist items, and vendor notes. When you use one-click translation, your invitation text is sent. Anthropic processes this under terms that do not permit your data to be used to train their models. The question assistant on our website (pricing and home pages) also sends the messages you type to Anthropic to answer them; if you choose to leave your email there, we keep it only to reply to your question. • OpenAI: powers the venue watercolor tool. The venue photo you upload is sent to OpenAI to generate the painting. If people are visible in the photo, their images are sent too. • Luma Labs: animates the finished watercolor when you choose that option. Advertising and measurement • Google: Google Analytics and Google Ads. Receives page views and technical data, and conversion events used to measure our advertising. • Meta: the Meta Pixel. Receives page views and technical data. • Pinterest: the Pinterest tag and the Pinterest Conversions API. Receives page views, technical data including your IP address and browser, and, for customers, an email address that is irreversibly hashed before it is sent so that Pinterest can match a purchase to an ad. Providers are located in the European Union and the United States. Transfers outside the European Economic Area rely on the European Commission's Standard Contractual Clauses or an adequacy decision, and each provider is bound by a data processing agreement.
Your guests' data belongs to your wedding. It is visible to you, the couple, and is never used for marketing, sold, or shared with advertisers. You decide what to ask your guests for. You are responsible for having a proper basis to collect their details and for telling them how their information will be used, in particular where you ask for allergy or dietary information. We act on your instructions in respect of that data. Guests do not need an account to RSVP. We do not run advertising or analytics trackers on the private guest invitation pages. The trackers described in section 7 run on our public marketing website only. Guest data is included in the snapshot sent to Anthropic when you use the AI assistant, as described in section 3. You can switch the assistant off at any time in your dashboard settings, and with it off nothing is sent.
• Wedding and guest data: with a lifetime purchase, kept for as long as your account exists. On the monthly plan, kept while your subscription is running, including the free trial and while a failed payment is being retried. Weddings on the free plan or whose subscription has been cancelled are permanently deleted 18 months after the wedding date (or 18 months after the wedding was created if no date was set), or when the subscription ends if that date has already passed. • Invitation availability: your invitation stays live while your subscription is active, or permanently with a lifetime purchase. • Assistant conversations: kept for 12 months so we can fix problems and improve answers, then deleted. • Contact form messages: kept for 24 months. • Payment records: kept for as long as tax and accounting law requires. You can export your guest list as a CSV at any time while your subscription is active, and you can ask us to delete your data earlier than the periods above.
Under the GDPR and applicable data protection law, you have the right to: • Access: request a copy of the personal data we hold about you. • Rectification: correct anything inaccurate. • Deletion: ask us to delete your account and associated data. • Portability: receive your data in a machine-readable format. • Restriction and objection: object to or limit specific processing, including our use of advertising and analytics providers. • Withdraw consent: where processing relies on your consent, withdraw it at any time, without affecting what was done before. To exercise any of these, use our contact page. We respond within 30 days. You also have the right to lodge a complaint with your national data protection authority. In France that is the CNIL.
We use storage on your device for two different purposes. Necessary • Authentication and session storage, required for you to sign in and for the application to work. • Security and abuse prevention, including rate limiting. Advertising and analytics • Google Analytics and Google Ads, to measure site usage and advertising performance. • The Meta Pixel. • The Pinterest tag, together with an identifier stored in your browser and a click identifier where you arrived from a Pinterest ad. If you are in the European Economic Area or the United Kingdom, nothing in the advertising and analytics group loads unless you accept it. We ask on your first visit, refusing is one click and exactly as easy as accepting, and if you refuse those tools are never loaded at all. Elsewhere, where local law does not require us to ask first, these tools load by default. You can turn them off at any time. Wherever you are, you can change your answer using the “Cookies” link in the footer of any page, and a refusal is honoured from that point on. None of these tools run on the private guest invitation pages. Your guests are not tracked.
Parts of this service use AI, and we tell you when you are using one. • The in-app assistant is an AI system, not a person. It is clearly labelled as such wherever it appears, and you can switch it off in your dashboard settings. • The invitation translation feature is machine translation. Every translated line stays editable, and we recommend you read it before sending your invitation to guests. • The venue watercolor tool generates an image from the photo you upload. None of these make automated decisions that produce legal or similarly significant effects for you. Your data is not used to train any provider's models. AI answers can be wrong, so please do not rely on the assistant for legal, financial, or medical questions.
Data is transmitted over HTTPS with TLS encryption and encrypted at rest in our database. Access to production systems is restricted and monitored. No system is perfectly secure, and we will notify you and the relevant authority as required by law if a breach affects your personal data.
We may update this policy. If we make a significant change, we will tell you by email or by a notice on the website. The date of the last update is shown at the top of this page.
For any question about this policy or your data, please use our contact page.