Privacy Policy

Introduction

Wedorable ("we," "us," or "our") operates the Wedorable wedding planning platform at wedorable.love. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services.

By using Wedorable, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

Data Controller

Dimitrios Sourailidis IT-Consulting Freelancer, Germany Email: support@wedorable.love

Information We Collect

Information You Provide

• Account data: Name, email address, and password (via Firebase Authentication)
• Wedding details: Partner names, wedding date and location, wedding slug/URL
• Guest information: Names, email addresses, phone numbers, RSVP status, dietary restrictions, group assignments, notes
• Photos: Images uploaded by you or your guests via the digital camera feature
• Content: Wedding page content, invitation text, schedule details, menu items, seating arrangements, song requests
• Financial data: Expense tracking information you enter (we do not process payments directly — see Paddle below)

Information Collected Automatically

• Usage data: Pages visited, features used, and actions taken within the platform
• Device data: Browser type, operating system, screen resolution
• Analytics: Anonymized usage statistics via Vercel Analytics
• Cookies: Essential cookies for authentication and language preferences (see our Cookie Policy)

How We Use Your Information

We use your personal data to:

• Provide and maintain the Wedorable platform
• Create and manage your account
• Process and deliver email invitations to your guests (via Mailgun)
• Store and serve wedding photos (via AWS S3 and CloudFront CDN)
• Generate wedding pages accessible to your guests
• Send transactional emails (account verification, password reset)
• Improve our services through anonymized analytics
• Respond to support requests

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

Third-Party Service Providers

We share data with the following trusted service providers, each bound by their own privacy policies:

| Provider | Purpose | Data Shared | |----------|---------|-------------| | Firebase (Google) | Authentication | Email, password hash, auth tokens | | Paddle | Payment processing (Merchant of Record) | Email, payment details (handled by Paddle) | | Vercel | Hosting and analytics | Anonymized usage data, IP address | | AWS S3 / CloudFront | Photo and file storage | Uploaded photos and files | | Mailgun | Email delivery | Guest emails, invitation content | | Inngest | Background job processing | Internal task data (photo exports) |

Paddle acts as our Merchant of Record, meaning they handle all payment processing, billing, and related financial data directly. We do not store your credit card or payment information.

Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

• Right of access — Request a copy of your personal data
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your personal data ("right to be forgotten")
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to restrict processing — Request limitation of how we use your data
• Right to object — Object to processing based on legitimate interests
• Right to withdraw consent — Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at support@wedorable.love. We will respond within 30 days.

Your Rights Under CCPA (California)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it's used
• Delete your personal information
• Opt out of the sale of personal information (we do not sell personal data)
• Non-discrimination for exercising your privacy rights

Data Retention

• Account data: Retained until you delete your account
• Wedding data: Retained until the associated wedding is deleted or account is closed
• Guest photos: Retained until deleted by the wedding organizer or account closure
• Analytics data: Anonymized and retained for up to 12 months
• Email delivery logs: Retained by Mailgun per their retention policy

When you delete your account, we will delete or anonymize all associated data within 30 days, except where retention is required by law.

Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data transmitted over HTTPS/TLS encryption
• Database encrypted at rest (PostgreSQL on managed infrastructure)
• Photos stored with server-side encryption on AWS S3
• Authentication handled by Firebase (industry-standard security)
• Access controlled on a per-wedding basis (data isolation)

For more details, see our Security Page.

International Data Transfers

Your data may be processed in countries outside your residence, including the United States (AWS, Firebase, Vercel) and the EU (our servers). We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable.

Children's Privacy

Wedorable is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The "Last Updated" date at the top of this page indicates when the policy was last revised.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

Email: support@wedorable.love

You also have the right to lodge a complaint with your local data protection authority. In Germany, this is the relevant state data protection authority (Landesdatenschutzbeauftragte).