Privacy Policy

We collect the following data, depending on how you use the service:

• Account data: name, email address, and profile photo — collected when you sign up/sign in, including via Google Sign-In. Authentication is handled by a third-party provider (Clerk).
• Invitation content: couple's names, event date, location, photos, and other details you enter in the invitation editor.
• Guest data: guest names you add for invitation personalization, plus RSVP responses and guestbook messages guests submit.
• Album photos: photos guests upload to an event's Collaborative Photo Album.
• Payment data: amount, status, and transaction reference when you pay for an invitation theme or album tier. Payments are processed by Xendit (QRIS) or PayPal — we never receive or store your card/bank account number directly.
• Technical data: IP address and device info, collected in a limited way to prevent spam/bots (Cloudflare Turnstile) on public forms (RSVP, photo upload, affiliate registration).
• Cookies: login session cookies, and a referral-tracking cookie (if you arrived via an affiliate link) that persists for 30 days.

If you choose to sign in with Google, we only request basic profile information (name, email address, profile photo) to create and authenticate your account. We do not request access to Gmail, Google Drive, Contacts, or other Google services beyond basic sign-in.

Data from Google is not used for advertising and is not sold or shared with third parties beyond those listed in this policy, in accordance with the Google API Services User Data Policy.

• Providing and operating the service (displaying invitations, photo galleries, RSVP).
• Processing payments and publishing/activating invitations or albums once paid.
• Sending service-related notifications (e.g. email on a new RSVP, payment confirmation) via a third-party email provider.
• Preventing abuse (spam, bots) on public forms.
• Calculating affiliate/partner program commissions if you register as a partner.

We use the following third-party providers to run the product. Each only receives the data necessary for its function:

• Clerk — authentication & account management (including Google Sign-In).
• Cloudflare R2 — storage for photos/images you upload.
• Cloudflare Turnstile — anti-bot verification on public forms.
• Xendit & PayPal — payment processing.
• ZeptoMail — notification email delivery.

Data is stored in a database we manage and protected with access controls. Photos are stored on Cloudflare R2. We retain data for as long as your account/invitation/album is active, and it can be deleted on request (see Your Rights below).

• Request a copy of the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and related data (invitations, photos, guest data) — contact us using the details below.
• Withdraw consent for non-essential cookies by adjusting your browser settings.

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Privacy questions can be sent to [email protected].