Privacy Policy

1. Introduction

Vowlee ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our digital wedding invitation platform at vowlee.com (the "Service").

2. Data We Collect

We collect the following types of data:

• Account information: name, email address, and authentication provider (e.g. Google).
• Invitation content: couple names, photos, videos, venue details, and wedding dates you add to your invitation.
• Guest data: names, email addresses, RSVP responses, meal preferences, and messages submitted through RSVP forms.
• Payment information: processed securely by Stripe. We do not store your credit card details.
• Usage data: pages visited, device type, browser, and general analytics to improve the Service.

3. How We Use Your Data

Your data is used for the following purposes:

• To provide and operate the Service, including hosting your invitations and processing RSVPs.
• To process payments and manage your account.
• To send transactional emails (e.g. account confirmation, password reset).
• To improve the Service through anonymised analytics.
• To provide customer support when you contact us.

4. Data Sharing

We do not sell, rent, or trade your personal data. Guest information submitted through RSVP forms is only accessible to the invitation creator. We share data only with trusted third-party services necessary to operate the platform: Supabase (database and authentication), Stripe (payment processing), and Cloudflare (media hosting and CDN). Each provider is bound by their own privacy policies and data protection obligations.

5. Third-Party Services

We rely on the following third-party services to operate Vowlee:

• Supabase — database hosting, user authentication, and data storage (EU region).
• Stripe — secure payment processing. Your payment data is handled entirely by Stripe and never touches our servers.
• Cloudflare R2 — media file storage (photos and videos uploaded to invitations).
• Google OAuth — optional sign-in method. We only receive your name and email from Google.

6. Cookies

We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Third-party services (such as Google OAuth) may set their own cookies according to their policies.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and applicable laws, you have the following rights:

• Right of access — request a copy of all personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your account and all associated data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to withdraw consent — withdraw consent at any time by deleting your account or contacting us.

8. Data Retention

Your account data and invitation content are retained for the duration of your account. Published invitations are hosted for 12 months from the date of purchase. Upon account deletion, all personal data — including invitation content, guest data, and uploaded media — is permanently removed within 30 days.

9. Data Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication, and access controls. While no system is 100% secure, we are committed to safeguarding your information.

10. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at contact@vowlee.com.