Privacy Policy

Last updated: 7 May 2026 Effective date: 7 May 2026

This Privacy Policy describes how WeddMyWay ("we", "us", or "our") collects, uses, and shares information about you when you use our wedding planning service available at weddmyway.com (the "Service").

You can contact us at hello@weddmyway.com.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information you provide directly

When you create an account and use WeddMyWay, you provide us with:

Account information: your email address, password (stored hashed), your first and last name, your partner's first and last name, and your wedding date.
Wedding planning data: information you enter while planning your wedding, including guest names, contact details, dietary requirements, plus-one information, RSVP responses, vendor names and contacts, budget figures, mood board images and notes, and any other content you create within the Service.
Payment information: when you upgrade to lifetime access, payment is processed by Stripe. We do not store your full payment card details. We receive and store a Stripe customer ID, payment status, and a record of the transaction (amount, date, currency).
Communications: if you contact us by email, we keep a record of that correspondence.

1.2 Information about your guests

When you use the Service to manage your wedding, you may add information about third parties (your guests, vendors, family members) including their names, contact details, and dietary needs. You are responsible for ensuring you have the appropriate basis to provide this information to us. We process this data on your behalf, in accordance with your instructions, to provide the Service. See Section 8 ("Guest and Third-Party Data") for more detail.

1.3 Information collected automatically

When you use the Service, we automatically collect:

Technical data: IP address, browser type and version, device type, operating system, time zone, and screen resolution.
Usage data: pages viewed, features used, time spent on pages, clicks, and the date and time of your visits.
Cookies and similar technologies: see Section 9 ("Cookies").

1.4 Information from email tracking

Our transactional email provider (Resend) tracks email opens and link clicks for emails we send you, so we can confirm delivery and improve our communications.

2. How We Use Your Information

We use the information we collect to:

Provide and maintain the Service, including hosting your wedding planning data and processing your payments.
Send transactional emails (welcome, payment confirmations, password resets, security alerts).
Respond to your support requests.
Improve the Service, fix bugs, and develop new features.
Detect, prevent, and respond to fraud, abuse, or security incidents.
Comply with our legal obligations, including tax and accounting requirements.
Generate aggregated, anonymised statistics about how the Service is used.

We do not use your wedding planning data, your guest list, your vendor information, or your budget for advertising or to train AI models.

3. Legal Basis for Processing (EEA, UK, and Swiss users)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:

Performance of a contract: to provide the Service you signed up for.
Legitimate interests: to improve the Service, ensure security, prevent fraud, and communicate with you about the Service. We balance these interests against your rights and freedoms.
Consent: for optional marketing communications and non-essential cookies. You can withdraw consent at any time.
Legal obligation: to comply with applicable laws, such as financial record-keeping.

4. Who We Share Your Information With

We share your information with the following categories of third parties (our "subprocessors"), only as necessary to provide the Service:

Subprocessor	Purpose	Location
Lovable Cloud / Supabase	Database hosting, authentication, file storage	United States / European Union
Stripe	Payment processing	United States (with global presence)
Resend	Transactional email delivery	United States
ImprovMX	Email forwarding for our hello@ address	United States
Google Analytics 4	Usage analytics	United States
Meta (Facebook) Pixel	Advertising analytics and conversion tracking	United States

Each of these providers has their own privacy policy and security practices. We have data processing agreements in place with our subprocessors where required by law.

We may also share your information:

With law enforcement, regulators, or other authorities when required by law or legal process.
In connection with a merger, acquisition, or sale of all or part of our business — in which case you will be notified before your data is transferred.
With your consent, for any other purpose disclosed at the time.

We do not sell your personal information to third parties.

5. International Data Transfers

Our subprocessors are primarily based in the United States and the European Union. This means your data may be transferred internationally.

For users in the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission for transfers to subprocessors outside those regions.

By using the Service, you acknowledge that your information may be processed and stored outside your country of residence.

6. Data Retention

We keep your information for as long as your account is active. If you delete your account, we delete or anonymise your wedding planning data within 30 days, except:

Payment and transaction records, which we keep for at least 5 years to comply with applicable financial record-keeping laws.
Records we are otherwise legally required to keep.
Backups, which are deleted on a rolling cycle (typically within 90 days).

You can request earlier deletion at any time (see Section 7).

7. Your Rights

Depending on where you live, you have certain rights regarding your personal information.

All users

You can:

Access and update your account information from your settings page.
Delete your account at any time by contacting hello@weddmyway.com.
Request a copy of the data we hold about you.

EEA, UK, and Swiss users (GDPR / UK GDPR)

You have the right to:

Access your personal data.
Rectify inaccurate data.
Request erasure ("right to be forgotten").
Restrict or object to processing.
Data portability — receive your data in a machine-readable format.
Withdraw consent at any time.
Lodge a complaint with your local data protection authority.

California users (CCPA / CPRA)

You have the right to:

Know what personal information we collect, use, and share.
Delete your personal information.
Correct inaccurate personal information.
Opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioural advertising).
Non-discrimination for exercising your rights.

To exercise any of these rights, email us at hello@weddmyway.com. We will respond within the timeframe required by the applicable law (typically 30 days).

8. Guest and Third-Party Data

When you use WeddMyWay to plan your wedding, you may upload personal information about your guests, vendors, and other third parties.

Your responsibility: you confirm that you have the right to share this information with us, and you will inform the relevant individuals about how their data will be used where required by applicable law.
Our role: we process this data on your behalf, as a data processor (under GDPR) or service provider (under CCPA), to provide the Service.
Public RSVP links: when a guest submits an RSVP through your public link, the information they provide is added to your wedding planning workspace and is subject to this Privacy Policy.
Guest deletion requests: if a guest contacts us directly to request deletion, we will forward the request to you and, where required by law, take appropriate action.

9. Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes:

Essential cookies: required for the Service to function (login sessions, security). These cannot be disabled.
Analytics cookies: Google Analytics 4 and Meta Pixel, which help us understand how the Service is used.
Functional cookies: to remember your preferences.

You can control cookies through your browser settings. Disabling essential cookies may break parts of the Service.

If you are in a region that requires consent for non-essential cookies, you will be presented with a cookie banner on your first visit.

10. Security

We take reasonable steps to protect your information, including:

Encryption in transit (HTTPS / TLS) for all connections to the Service.
Encryption at rest for our database (provided by Lovable Cloud / Supabase).
Access controls — only authorised personnel can access user data, and only when necessary.
Regular security updates to the underlying platform.

However, no system is 100% secure. If we become aware of a security incident affecting your data, we will notify you and the relevant authorities as required by law.

11. Children's Privacy

WeddMyWay is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The "Last updated" date at the top of this policy indicates when it was most recently revised.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: hello@weddmyway.com