Privacy Notice

• Wedonia users: couples, the collaborators they invite, and wedding planners;
• wedding guests who give details on a wedding website or attendance reply page (see section 3);
• vendors and sellers registering on the marketplace, and visitors who contact them;
• visitors to the website.

Wedonia's operator, Dávid Ármin Szőrös, sole proprietor (registered office: Mátyás király tér 2, 1204 Budapest, Hungary; email: team@wedonia.com; phone: +36 30 828 3863), is the controller of account data, sign-in, subscription events, legal acceptances, support tickets, marketplace registrations and listings, and — with your consent — analytics data.

The data of a wedding (guest list, replies, dietary and accommodation details, photos, documents, chat messages) is controlled by the owner of that wedding; Wedonia stores and processes it on the owner's behalf, as a processor. See sections 3 and 5 of the Terms and Conditions.

Payments are handled by Stripe, an independent controller of payment data. Card details never reach Wedonia.

If a couple has invited you to their wedding and uses Wedonia to plan it, your data is controlled by the couple — more precisely, by the owner of the wedding, or the wedding planner if they created it. They decide what they ask for and how it is used; Wedonia only provides the tool.

The data concerned:

• your name and household (family), and your email address and phone number;
• your attendance replies per event, your accommodation need and any message to the couple;
• your dietary tags and allergens — health data, a special category, which the reply page records only with your explicit consent;
• the details of a plus one coming with you, if the couple allows it;
• messages you write in the chat;
• a photo of you, if the couple uploads one;
• your guestbook entry (message, photo, quote, mood); if you post anonymously your name is shown nowhere, but the system records which guest wrote it — that is how everyone can write only once, and how we can act on misuse;
• photos, stories and songs you send to the memory collector, with the approximate date you give;
• the songs you request (artist, title, YouTube link) and your votes in the song requests;
• photos taken in the camera app, the selected photographer, any photo reports, when and which version of the camera rules you accepted and — unless you switch location off — the capture location, accuracy and approximate device bearing;
• if you ask for a sign-in code by email, your email address and when you asked;
• a log of what you do on the reply page — signing in, a wrong PIN, sending or changing your reply, asking for a plus one, a message in the shared chat — which the couple can see; it does not contain the text of your message or of your reply note.

Who sees it: the couple and the collaborators they invite (every role sees the whole guest list), and the wedding planner if they created the wedding. Messages you write in the chat's "everybody" room are also visible to the other invited guests. Wedonia staff access it only for operations or support.

What it is used for: planning the wedding and keeping in touch with you. On the couple's behalf, Wedonia emails a confirmation of your reply and — if you have not replied yet — a reminder before the reply deadline. The couple can also send guests their own messages by email through Wedonia, written and scheduled by them.

About photos: an image the couple uploads to the guest list is visible only to the couple and their collaborators through expiring links. The couple and their collaborators can see camera-app photos; from the release time chosen by the couple, guests who sign in as a household can see them too. Anyone with a household code and PIN can delete photos assigned to a member of that household. Any signed-in guest can report a photo to the couple.

About the guest apps: guestbook entries on the wall are visible to every signed-in household, and the couple can hide an entry. What you send to the memory collector is visible only to your own household and the couple. In the song requests other guests see only how many asked for a song; the couple also sees who. The couple decides whether the apps are on and moderates and deletes what is sent. Photos sent to the guest apps are deleted together with the other uploaded files (see the retention section); text entries stay with the wedding's data. You can also report unlawful content to us at team@wedonia.com.

In the camera app location is on by default, so the couple and the guests can look back at the photos on a map. It is recorded only if you grant your browser's location permission; while taking photos you can switch it off at any time with the Location button, and when it is off we store no location. When it is on, coordinates are stored in both the JPG EXIF data and the database for the map view. Later viewers and anyone who receives the image file can learn the location. Compass bearing and location accuracy depend on the device. Opening the map loads map tiles from OpenStreetMap servers.

You sign in to the reply page with your household's code and PIN, or with a one-time code sent to your email address; a strictly necessary cookie starting with wrsvp_ keeps you signed in.

To have your details corrected or deleted, or to withdraw your consent for dietary data, please contact the couple first. If you cannot reach them, write to team@wedonia.com and we will help.

• Account data: email address, name, profile picture, language, region, time zone, interface settings and sign-in times. Legal basis: performance of the contract.
• Sign-in and security: the sign-in service (Supabase) also logs the IP address and browser identifier of each session. Legal basis: legitimate interest (protecting the account).
• Subscriptions and invoicing: plan, amount, payment events, Stripe identifiers and billing details (name, address and, for business buyers, tax number). Legal basis: performance of the contract; issuing and keeping the invoice is a legal obligation (accounting and tax law).
• Legal acceptances: which version of which document you accepted, when, and the browser identifier used. Legal basis: legal obligation and legitimate interest (proving acceptance).
• Support: the text of your request, attached images, a technical error log, the browser identifier and a one-way hash of the IP address. Attached images are stored privately; only you and support can open them. Legal basis: performance of the contract.
• Planning reminder emails: you can unsubscribe with the link at the bottom of each email; sign-in codes still arrive.

An account cannot be created without your email address, and a plan cannot be bought without billing details: providing them is necessary to conclude and perform the contract, and without them we cannot provide the Service. Whether and which guest data to enter is up to the couple.

When a vendor registers (wedonia.com/vendor), we handle the business name, category, town and the email address given, and — if provided — the contact person's name, phone number, address, website, Instagram account and description; the registration email address is not shown on the public profile. Purpose: preparing the marketplace listing and contacting you. Legal basis: steps taken at your request before entering into a contract (GDPR art. 6(1)(b)), and our legitimate interest in preventing abuse (art. 6(1)(f)). Retention: until you ask for removal — an unclaimed registration can be deleted with the link in the confirmation email, a claimed profile from within the account — or until the marketplace is discontinued.

When you message a vendor or seller, the name, contact details and message you give are passed to the recipient, who from then on is an independent controller. Wedonia stores that first message and the recipient also sees it in their account; replies then happen between your own mailboxes and Wedonia does not store them.

The “Try the demo” button creates an anonymous trial account without registration, with a sample wedding of invented data in it. The trial account has no name or email address.

Whatever you type in the demo is stored only in that sample wedding. The demo sends no email, starts no payment, and anything sent to the guest apps as one of the invented guests never leaves your phone (photos uploaded in the couple’s own test mode are deleted together with the sample wedding). Please do not enter real personal data in it.

The sample wedding expires 24 hours after it was last used and the hourly clean-up deletes it for good, files included; the anonymous trial account is deleted at the latest 2 days after it was created. The legal basis is our legitimate interest in showing the service.

Waiting list: if you give your email address on the home page, we use it for one purpose only — we tell you once when Wedonia launches. We send no newsletter or advertising to it; you can unsubscribe in that email. Legal basis: your consent, given by pressing the button.

You can subscribe to our newsletter on the website or as part of a promotion. We then process your email address, your language, and the source and time of the subscription. Legal basis: your consent.

In some promotions the discount is conditional on subscribing to the newsletter. We say so clearly on the promotion page, before you claim the discount. Wedonia’s services remain available without subscribing, at the regular price.

Further details given when claiming a promotion (first name, couple type and, where the promotion asks for them, answers to a short questionnaire) are processed to provide the discount, to prevent abuse (one person and one wedding may take part in a promotion once) and to improve the service. Legal basis: steps prior to a contract to provide the discount (GDPR art. 6(1)(b)), and our legitimate interest in preventing abuse and improving the service (art. 6(1)(f)).

You can withdraw your consent at any time using the unsubscribe link at the bottom of every newsletter or by writing to team@wedonia.com. Withdrawal does not affect a discount already issued, nor the lawfulness of processing before the withdrawal.

• Files uploaded to a wedding: deleted 60 days after the subscription ends (grace period included) or 60 days after the wedding day, whichever is earlier, with at least 7 days' email notice to the owner (Terms, section 7). On a one-off plan they are kept no longer than 3 years and 60 days after the plan was activated, and for a wedding with no date no longer than 2 years after it was created.
• A wedding's personal data (guest list, replies, contact details, dietary, accommodation, messages, the guests' activity log, the guest apps' content, the guest site's texts, the couple's names): deleted on the 60th day after the wedding day; for a deleted wedding, no later than the 30th day after the deletion, if that is earlier. For a wedding with no date: 12 months after its plan ended, or — if it never had a plan — on the 60th day after it was created, in both cases with at least 7 days' email notice to the owner. On a one-off plan: no later than 3 years and 60 days after the plan was activated, and for a wedding with no date no later than 2 years after it was created, again with notice to the owner. Planning data that names no one (such as vendor offers, prices and the budget) is kept afterwards and may be used for statistics and product development.
• Trial exception: if the wedding’s plan trial ends without payment, the wedding’s personal data is deleted on the 60th day after the trial ends, unless an earlier deadline applies because of the wedding day or a requested wedding deletion. Buying a plan before deletion removes this trial deadline. We notify the owner by email at least 7 days before deletion.
• Copies of sent emails (the outgoing mail queue): 180 days; after that the recipient, subject and body are erased and only the fact of sending is kept, so the same mail is never sent twice.
• Accounts: until deletion is requested; the request can be undone within 24 hours, after which the account is deleted.
• Invoices and payment events: 8 years (Hungarian Accounting Act C of 2000, section 169).
• Legal acceptances (of the terms and this notice, and the statements made before paying): until the account is deleted. The terms and notice versions a purchase was made under are kept with the billing data for 8 years.
• Cookie consent: 12 months, after which we ask again.
• Waiting list: until the 30th day after the launch notice has been sent, or until you unsubscribe, whichever is earlier.
• Newsletter subscription: until you unsubscribe. Promotion claims: for 1 year after the promotion ends.
• Marketplace listings: a listing expires after 45 days; an expired listing is kept until the account is deleted.
• Vendor registrations: until you ask for removal or until the marketplace is discontinued (see section 5).
• Complaints: the complaint and our answer are kept for 3 years from the answer (legal obligation; Hungarian Consumer Protection Act CLV of 1997, section 17/A(7)).
• Other support requests: kept after they are closed, so we can look back if you ask again later; you can ask for their deletion at any time at team@wedonia.com.
• Analytics (PostHog): up to 12 months; session recordings up to 30 days.
• Backups: deleted data disappears from the daily backups within 7 days, because backups are kept for 7 days.

Our processors — they handle data on our behalf and on our instructions:

• Supabase — database, file storage and sign-in; data is stored in the European Union (Frankfurt).
• Cloudflare — serving the website and bot protection (Turnstile).
• Postale (postale.io) — delivering system messages, guests' reply-page sign-in codes, notifications and invoices by email.
• Brevo (Sendinblue SAS, France, EU) — delivering the emails with the codes for signing in to an account; it receives your email address and the email containing the code.
• Billingo — issuing invoices. By law, invoice data is also reported to the Hungarian tax authority (NAV).
• PostHog (EU) — analytics, only with your consent; when enabled, this includes session recording (a replayable record of clicks, scrolling and page changes; the content of input fields is masked).
• MailerLite — managing newsletter subscriptions and sending newsletters.
• Telegram — internal alerts to the operator (for example about an invoice to be issued); it receives only the order reference and the amount, never a name or email address.

Independent recipients — they handle data as controllers in their own right, under their own notices:

• Stripe — payments and customer portal (an independent controller of payment data).
• Meta — receives purchase data through Stripe to measure advertising conversions.
• OpenStreetMap — displaying maps; when a map opens, your browser loads the map tiles directly from them.
• Mapbox — the marketplace's map view; it loads only when you open that view, and your browser then loads the map directly from them.
• Google Maps — when a wedding's guest site shows a map, the embedded map loads with the page; your browser then connects directly to Google, which receives data about it (such as your IP address). A short note under the map says so.
• Google — if you sign in with a Google account.
• OpenStreetMap (Nominatim) — when you search for an address, our server passes the typed address on for geocoding; nothing from your browser reaches them.
• European Commission (VIES) and the Hungarian Tax Authority (NAV) — checking a business buyer's tax number.

The US parent companies of Supabase, Cloudflare and PostHog (Supabase Inc., Cloudflare Inc., PostHog Inc.), as well as Stripe, Meta, Google and Mapbox, may also process data in the United States. Such transfers rely on the EU–US Data Privacy Framework (GDPR art. 45) and/or the European Commission's standard contractual clauses (art. 46).

The list below names the cookies of wedonia.com and app.wedonia.com, and the browser storage equivalent to them — by name, purpose, provider, lifetime and legal basis. In addition, the browser's local storage (localStorage, IndexedDB) may hold data the interface needs and that never leaves the device: chosen views and expanded panels, drafts, the wishlist when signed out, and camera photos not yet uploaded. These are needed for the function you asked for, are set without consent, and are removed by clearing the browser's data.

Strictly necessary storage, set without consent (legal basis: legitimate interest or performance of the contract; no consent is required under section 155(5) of the Hungarian Electronic Communications Act):

• sb-…-auth-token — your sign-in session — Wedonia (Supabase) — up to 400 days, removed when you sign out.
• wrsvp_… — a guest's reply-page sign-in — Wedonia — 30 days.
• wsite_… — access to a password-protected wedding website — Wedonia — 30 days.
• NEXT_LOCALE — the language you chose — Wedonia — until the browser closes; up to 400 days when an old value is corrected.
• selected_wedding_id — the wedding selected in your account — Wedonia — 1 year.
• wedonia_consent — your cookie decision (also in the browser's local storage) — Wedonia — 12 months.
• wedonia-cookie-scope2 — a technical marker recording that the sign-in cookies on this address have already been moved once to the shared wedonia.com domain — Wedonia — 400 days.

Storage set only with your consent (legal basis: consent, GDPR art. 6(1)(a)):

• ph_…_posthog — analytics (PostHog, EU servers; also in the browser's local storage) — 1 year.
• wedonia-lp-variant — which version of the home page you saw, to evaluate the measurement — Wedonia — 180 days.

Third-party loads that set no cookie on our domain, but to which your browser connects directly: the Cloudflare Turnstile bot check (on sign-in and forms), OpenStreetMap and Mapbox map tiles (only when a map is opened) and Google Maps (on guest sites that show a map). They may store data on their own domains under their own notices.

Without consent, analytics never starts. You can change or withdraw your decision at any time with the "Cookie settings" button at the top of this privacy notice or in the account menu; the decision and its version are recorded in the wedonia_consent cookie. If you withdraw your consent, analytics stops and we delete PostHog's cookies and the data it stored in your browser, as well as the wedonia-lp-variant cookie.

You can request access to your data, its correction, erasure or restriction, object to its processing, request data portability, and withdraw your consent at any time. As an account user you can also download your data from the account deletion screen.

For a wedding's data, please contact the owner of that wedding; if you contact Wedonia, we will forward your request to the owner and help fulfil it.

You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11, www.naih.hu) or with the supervisory authority where you live, or go to court.

If the operation of Wedonia passes to a company (for example, the business becomes a limited company), that company becomes the controller; we notify you by email at least 30 days in advance, and the purposes and ways of processing do not change. Contact: team@wedonia.com.