Privacy policy

Who we are

iPlanMyWedding is published by Florian Padel, 13 cours du Danube, 77700 Serris, France. Contact for any question about your data: florian.padel.work@gmail.com.

We are the controller of your account and purchase data. For your guests' data, you (the couple) are the controller and we act as a processor, only to provide the service to you.

Data we collect

Account: first name, email, hashed password (or Google sign-in), date you accepted this policy.

Wedding planning: wedding details, tasks, budget, vendors, website content and photos.

Guests: names, emails, phone numbers and addresses you enter, RSVP answers, menu choices and dietary needs. Dietary needs may reveal sensitive information: only enter what is needed.

Contact requests: name, email, phone, wedding date, message.

Payments: processed by Stripe. We never see or store your card number; we keep the product bought, the amount and the Stripe reference.

Why and on what basis

Providing the service (account, planning, wedding website, RSVP, guest emails): performance of the contract.

Taking payments and bookkeeping: contract and legal obligation.

Answering contact requests: your consent, given in the form.

Securing the service (abuse prevention, technical logs): our legitimate interest.

Measure how the service is used (steps completed in the space, where sign-ups come from, pages viewed) as anonymous, aggregated statistics: our legitimate interest.

We do not use your data for advertising and never sell it.

Retention

Account and wedding data: until you delete your account ("My account" page), which immediately erases the weddings you organise alone, guests included.

Contact requests: 3 years after the last exchange.

Accounting records (invoices): 10 years, kept by Stripe and by us as required by law. When an account is deleted, we keep only what was sold, the amount, the date and the delivery country, without any name, email, address or message. A print order not yet shipped keeps its address until it ships.

Processors and hosting

Vercel (hosting, photos, Vercel Web Analytics audience measurement and Speed Insights performance measurement), Neon (database), Resend (email delivery), Upstash (job queue), Stripe (payments). Some are located outside the European Union (United States); transfers rely on the European Commission's standard contractual clauses and, where applicable, the Data Privacy Framework. We pick European regions when the provider allows it.

Cookies

We only use cookies needed for the service to work: sign-in session, chosen language and access to password-protected sites. No advertising or analytics cookies, so no consent is required.

Audience and performance measurement (Vercel Web Analytics and Speed Insights) set no cookie and do not follow visitors across sites: they count page views and their loading times anonymously, keep no IP address, and secret links (invitations, password reset, unsubscribe) are masked before sending.

An internal “ref_site” cookie (30 days) remembers the wedding website you came from when you click the “Made with” mention. It is only used to count, anonymously, the sign-ups wedding websites bring, and is never shared.

Your rights

You can access, correct and erase your data, ask for portability, object to or restrict processing. From "My account" you can download all your data (JSON) and delete your account yourself.

Guests: for any request, contact the couple who invited you, or write to florian.padel.work@gmail.com and we will pass it on.

If you believe your rights are not respected, you can complain to the French data protection authority, the CNIL (cnil.fr).

Security

Encrypted connections (HTTPS), hashed passwords, each wedding's data restricted to its organisers, guest websites kept out of search engines unless the couple chooses otherwise, and optionally password protected.