Privacy Policy

Last updated: June 2, 2026

1. Introduction

Weddose ("we," "us," or "our") operates the Weddose wedding planning platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

By accessing or using Weddose, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, name, and password when you register.
  • Wedding Details: Wedding date, venue, titles, and event descriptions.
  • Guest Information: Names, email addresses, RSVP status, dietary preferences, and seating assignments.
  • Vendor Details: Vendor names, contact information, and communication history.
  • Uploaded Media: Photos, documents, and other files uploaded to the Service.
  • Payment Information: Billing details processed securely through Stripe. We do not store credit card numbers on our servers.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, clicks, and session duration via Google Analytics (GA4).
  • Device Information: Browser type, operating system, device type, and screen resolution.
  • IP Address: Used for security, abuse prevention, and approximate geolocation for consent banner display.
  • Cookies: See our Cookies Policy for details.

3. Lawful Basis for Processing (GDPR)

We process your data under the following lawful bases:

  • Contract Performance: Processing necessary to provide the Service you signed up for.
  • Legitimate Interest: Improving our Service, fraud prevention, and security monitoring.
  • Consent: Analytics and marketing cookies are only activated with your explicit consent (for EU visitors).

4. How We Use Your Information

  • To provide, operate, and maintain the Service.
  • To process subscription payments via Stripe.
  • To send transactional emails (account verification, password resets).
  • To analyze usage patterns and improve features (when analytics consent is given).
  • To provide customer support.
  • To enforce our Terms of Service and protect against abuse.

5. Third-Party Services & Sub-Processors

ServicePurposeData Shared
StripePayment processingEmail, billing info, subscription tier
Google Analytics (GA4)Usage analyticsAnonymized page views, feature usage (no PII)
Cloudflare R2Media file storageUploaded photos and documents
SMTP Email ProviderTransactional emailsEmail address, email content
Google OAuthSocial sign-inEmail, name (if you choose Google sign-in)

6. Data Retention

  • Active Accounts: Data retained while account is active.
  • Cancelled Subscriptions: Data retained in read-only mode. You can request deletion at any time.
  • Account Deletion: All personal data deleted within 30 days upon request.
  • Logs: Server logs and analytics data retained for up to 14 months.

7. Your Rights (GDPR & CCPA/CPRA)

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate data.
  • Erasure: Request deletion ("right to be forgotten").
  • Portability: Receive data in a structured, machine-readable format.
  • Object: Object to processing based on legitimate interests.
  • Opt-Out of Sale/Sharing (CCPA): We do not sell personal information.

To exercise any right, contact [email protected]. We will respond within 30 days (GDPR) or 45 days (CCPA).

8. Data Security

We implement HTTPS encryption, secure password hashing, CSP headers, CSRF protection, and access controls. Payment data is handled entirely by Stripe.

9. Children's Privacy

Weddose is not directed at children under 16. We do not knowingly collect personal information from children.

10. International Transfers

Your data may be processed in the United States. For EU/EEA residents, we rely on Standard Contractual Clauses and/or your explicit consent.

11. Changes to This Policy

We may update this policy and will notify you of material changes by email or in-app notice.

12. Contact Us