Privacy Policy

Effective date: April 20, 2026
Last updated: April 20, 2026

This Privacy Policy explains how Weddify (operated by Weddify Inc., incorporated in Canada — hereafter "Weddify," "we," "us") collects, uses, discloses, and protects personal information when you use our mobile applications, our website at weddify.com, and any related services (collectively, the "Service").

We built Weddify to help couples plan their weddings, connect with vendors, and share the moment with guests. That means we handle personal information for three overlapping audiences — couples, guests, and vendors — and this policy is written to be clear about which apply to you.

1. Information we collect

Information you provide directly

• Account information — name, email, password (stored hashed via our auth provider).
• Event information — wedding date, location, description, cover photo, invited guests, hosts.
• Guest list information — names, emails, phone numbers, RSVP responses, dietary restrictions, plus-ones, seating preferences.
• Payment information — we do not receive or store credit card numbers. When you pay through Weddify, card details are entered directly into Stripe's hosted checkout, and Stripe returns us only a payment identifier.
• Content you post — photos, videos, messages, comments, poll answers, and any other content you upload to the Service.

Information collected automatically

• Device and usage data — device model, operating system, app version, crash reports, screens viewed, actions taken.
• Approximate location — derived from IP address, used for localization and fraud prevention. We do not collect precise GPS location.
• Cookies and similar technologies — see our Cookie Policy.

Information from vendors and partners

If you're a vendor on Weddify, we collect information you provide during onboarding (business name, address, service categories, portfolio media, pricing), plus payout information handled by Stripe Connect. If you book a vendor, we receive information about that booking — dates, amounts, any messages exchanged on the platform.

2. How we use your information

We use the information above to:

• Provide and operate the Service (create your event, send invites, process payments, host your photos, etc.).
• Send transactional notifications (RSVPs, booking confirmations, contribution receipts).
• Provide customer support and respond to your requests.
• Prevent fraud and abuse, including verifying vendor identity and detecting suspicious activity.
• Improve the Service — we analyze aggregated usage patterns to understand what works.
• Comply with legal obligations (tax reporting, responding to legal requests).

We do not sell your personal information. We also do not use your data to train machine-learning models beyond our internal product analytics, and we never use private event content (messages, guest lists, photos) for marketing or advertising.

3. Payments and cash funds

Weddify uses Stripe Connect to process payments. When a guest contributes to a couple's cash fund:

• Card details are collected by Stripe on Stripe-hosted pages. Weddify never sees or stores those details.
• Funds flow directly to the couple's Stripe-connected account via Stripe's destination-charge mechanism. Weddify does not custody the funds at any point.
• Stripe's own privacy policy and PCI DSS compliance apply to the payment portion of the transaction: https://stripe.com/privacy.

For vendor bookings, the flow is similar: clients pay via Stripe, and Weddify acts as a platform facilitator. Weddify retains a record of transactions for support, refund, and tax-reporting purposes.

4. Photos, posts, and guest content

When you upload photos, videos, comments, or messages to Weddify:

• You retain ownership of your content.
• You grant Weddify a limited license to store, display, and transmit it to the audience you've specified (wedding-only, guests-only, etc.).
• Private wedding feeds are not publicly indexed. We store media on our infrastructure (currently MinIO-compatible object storage) with access-controlled URLs.
• You can delete your content at any time. Deleted content is removed from user-facing views immediately and purged from our backups within 90 days.

5. Data about guests who haven't signed up

When a couple adds you to their guest list before you've created a Weddify account, we receive your name and contact information (usually email or phone) from the couple for the purpose of inviting you and tracking your RSVP.

• We will only use that information to deliver the invitation and enable the event's features (RSVP, seating, contributions).
• You can request we delete your data at any time by emailing privacy@weddify.com — even if you don't have a Weddify account.
• If you do not create an account within a reasonable time (currently 12 months after the event), we will delete or anonymize your guest record unless the event host has an ongoing legal obligation to retain it (e.g. an unresolved payment dispute).

6. Third-party service providers

We share data with service providers strictly as needed to operate the Service:

• Stripe, Inc. — payment processing, fraud prevention, Connect account onboarding.
• Apple Push Notification service (APNs) / Google Firebase (FCM) — push notification delivery.
• Keycloak / authentication provider — identity management.
• Object storage provider — hosting photos, videos, and other media you upload.
• Email / SMS delivery providers — for invitations and transactional messages.
• Error monitoring (Sentry or equivalent) — crash reports and debugging. Error reports are scrubbed of PII where possible.
• Analytics (if enabled) — aggregated usage patterns. We do not use advertising-class analytics providers.

We do not share personal information with third parties for their own marketing purposes. We may disclose information to comply with a valid legal process (subpoena, court order) or to protect the rights and safety of Weddify, our users, or the public.

7. How long we keep your data

• Account data — as long as your account is active, plus a reasonable grace period after deletion for dispute resolution.
• Event data — kept for 2 years after the wedding date so couples can revisit memories; deleted or anonymized after that unless you explicitly extend retention.
• Payment records — retained for 7 years to comply with Canadian tax and anti-money-laundering obligations.
• Deleted content — purged from user-facing views immediately; purged from backups within 90 days.

8. Your rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the data we hold about you.
• Correction — correct inaccurate or incomplete information.
• Deletion — request deletion of your data, subject to legal retention obligations.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — where processing relies on consent, you can withdraw it at any time.
• Lodge a complaint — with the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or your local data-protection authority.

To exercise any of these rights, email privacy@weddify.com. We will respond within 30 days.

9. International data transfers

Weddify is based in Canada. Your data may be processed in Canada, the United States (where Stripe, AWS, and several of our other service providers are based), or the European Union. When we transfer data internationally, we rely on appropriate safeguards (standard contractual clauses, data processing agreements) to ensure your information receives equivalent protection.

If you are a Quebec resident, you have the right to be informed about any cross-border transfer of your personal information. The principal jurisdictions your data is transferred to are Canada and the United States.

10. Children's privacy

Weddify is intended for users 18 years and older. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us at privacy@weddify.com and we will delete it.

11. Security

We use industry-standard security measures to protect your information — TLS encryption in transit, encryption at rest, least-privilege access controls, regular security reviews, and audit logging for sensitive operations. No system is perfectly secure. In the event of a data breach, we will notify affected users and the relevant privacy authorities as required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via in-app notice or email to the account address on file at least 30 days before taking effect. The "Last updated" date at the top of this policy reflects the most recent version.

13. Contact us

Weddify Privacy Officer
Email: privacy@weddify.com