Privacy & your data

Who can see what?

Partners control their workspace and collaborators. Finance helpers can see financial records. Guest coordinators see guests and responses within their celebration access. Individual invitations show only that guest’s celebrations. Optional household invitations allow everyone holding the link to respond for the whole household and require matching celebration access.

Invitation and programme links are private bearer links: anyone holding one can use its stated access. Partners can revoke them. Read-only programme links do not provide RSVP access. Downloaded files and forwarded copies cannot be recalled.

Guest information

Names, invitation access, replies, and optional meal or accessibility notes help your hosts make arrangements. Include only the details needed for your attendance. Ask your hosts to correct or remove guest information. Hosts can record replies received by phone or WhatsApp.

Your records and retention

Partners can export the complete wedding record, download files, archive a wedding, and permanently delete it from Data & privacy inside the workspace. Archiving pauses guest access but retains the records; it is not deletion. Active and archived plans remain until a partner deletes them during this pilot. No indefinite paid hosting commitment is offered.

Deleting a wedding blocks access first, removes its live files and records, and can be retried if interrupted. Other weddings and sign-in accounts remain. Close your sign-in account from Account after deleting weddings you own. Software payment records remain without your account ID. Confirm hosted backup retention with the operator before launch.

Service operation

The intended hosted service uses Supabase for accounts and records and Cloudflare for the application and private files. Hosting region, operator contact, backup retention, and applicable service terms must be published before a public launch. This pilot page is not a claim that a public production service has launched.