Privacy Policy

Who we are

Wedsy provides wedding planning software available via web and mobile app. We act as a data controller for account and billing data, and as a data processor for wedding and guest data that couples store in the product.

Data we collect

We collect and process the following categories of data:

• Account data — name, email address, hashed password, profile image, and authentication records (including Google or Apple sign-in tokens where used).
• Billing and subscription data — subscription tier, subscription status, and payment metadata processed via Stripe. We do not store full card numbers.
• Wedding planning content — event details, budgets, vendor contacts, checklists, seating plans, mood boards, and any other content couples create inside the product.
• Guest data (entered by couples) — guest names, email addresses, postal addresses, meal choices, dietary requirements, RSVP responses, and answers to custom questions set by the couple.
• Guest-uploaded media — photos and videos uploaded by wedding guests via the guest app or public wedding website, along with optional uploader names and captions.
• Audio recordings — voice guestbook messages recorded by guests via the mobile app (up to 60 seconds per recording).
• Guestbook notes — text messages and song requests submitted by guests on the public wedding website or mobile app.
• Device identifiers — push notification tokens (Expo push tokens) associated with guest or planner devices, along with platform (iOS/Android).
• In-app purchase data — subscription and entitlement information processed via RevenueCat on mobile.
• Support communications — messages sent to us via email or in-product support.

How we use data

• Provide, operate, and secure the Wedsy service.
• Authenticate users and protect accounts.
• Process subscription payments and manage entitlements.
• Send transactional emails (invitation emails, RSVP confirmations, reminders).
• Deliver push notifications to guests and planners (where opted in).
• Store and serve guest-uploaded photos, videos, and audio recordings.
• Generate AI-assisted suggestions via the Wedsy AI assistant (Anthropic Claude).
• Respond to support requests.
• Improve product reliability and performance.

We do not sell personal data. We do not use personal data for targeted advertising or share it with advertising networks.

Legal bases (GDPR)

• Contract performance — processing your account data, billing, and delivering the service you signed up for.
• Legitimate interests — service security, fraud prevention, and product improvement.
• Legal obligation — retaining billing records as required by tax and financial regulations.
• Consent — push notifications and any optional marketing communications.

Guest data is processed on behalf of the couple (the data controller for their guests) under a processor relationship.

Third-party service providers

We share data only with providers necessary to operate Wedsy. Current sub-processors include:

• Amazon Web Services (AWS) — cloud hosting and S3 file storage for photos, videos, and audio recordings.
• AWS SES — transactional email delivery.
• Stripe — payment processing and subscription management.
• RevenueCat — mobile in-app purchase and subscription management.
• Anthropic — AI model provider powering the Wedsy AI assistant. Prompts may include wedding context you have entered.
• Google (Sign-In) — optional OAuth authentication. Google's privacy policy applies to data processed through Google Sign-In.
• Apple (Sign in with Apple) — optional OAuth authentication on iOS. Apple's privacy policy applies.
• Expo (push notifications) — push notification delivery infrastructure for the mobile app.

We do not share personal data with any other third parties except where required by law.

International data transfers

Wedsy is operated from the United Kingdom. Data may be transferred to and processed in the United States and other countries where our service providers operate (including AWS and Anthropic). Where we transfer data outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

Data retention

• Account data — retained for the life of your account and deleted within 30 days of account deletion.
• Wedding and guest data— retained as long as the wedding exists in your account. You can delete individual weddings or your entire account at any time from Settings > Privacy & Data.
• Guest-uploaded media (photos, audio) — retained until the wedding is deleted or the couple removes individual items. Automatic pruning may apply after an extended period following the wedding date.
• Billing records — retained for up to 7 years to comply with tax and financial regulations.
• Push notification tokens — retained until a device is unregistered or the wedding is deleted.

Children's privacy

Wedsy is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@wedsy.app and we will delete it promptly.

Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Request a portable copy of your data.
• Withdraw consent where processing is based on consent.

Wedsy account holders can export data and request account deletion from Settings > Privacy & Data. You can also manage push notification preferences in the mobile app settings.

To submit a formal data request, email privacy@wedsy.app. We will respond within 30 days. If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority (in the UK: the ICO at ico.org.uk).

California privacy rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. Wedsy does not sell personal information. To exercise your rights, contact us at privacy@wedsy.app.

Cookies

We use essential session cookies for authentication. See our Cookie Policy for details.

Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or in-product notice. The date at the top of this page reflects the latest revision.

Contact

Privacy requests and questions: privacy@wedsy.app