Privacy Policy

Who We Are

Controller: Connor Finan trading as Amorly, 12 Old College View, Sauchie, FK10 3FJ, United Kingdom.

If you have questions about this policy or your data, contact us at amorly.weddings@gmail.com.

Information We Collect

• Account identifiers: email address, display name, avatar URL, and authentication identifiers from Google or Apple sign-in.
• Wedding planning data: wedding name, date, venue, currency, members and roles, tasks, seating charts, and expense items/payments.
• Guest and RSVP data: guest names, email addresses, invite links, RSVP status, and RSVP notes.
• Wedding website content: site pages, titles, and content blocks you create in the website builder.
• Uploaded files: images you upload for your wedding website or planning workspace.
• Email activity: email template usage, recipient addresses, delivery status, and preference changes (including IP address and user agent where captured).
• Session and security data: session token hashes, session expiry, IP hash, and user agent.
• Usage and diagnostic data from analytics and performance monitoring tools, if enabled.
• Support or chat data you submit through our live chat widget, if enabled.

How We Use Information

• Provide and improve the wedding planning service and wedding websites.
• Authenticate users, manage sessions, and secure accounts.
• Send service emails (invites, RSVP links, digests, and account notifications).
• Operate features like guest lists, RSVP tracking, seating charts, and budgets.
• Monitor performance and understand product usage.
• Detect, prevent, and respond to misuse of the platform.

Legal Bases (UK GDPR / GDPR)

• Contract: to provide the service you request.
• Legitimate interests: to secure, maintain, and improve the platform.
• Consent: where required for optional analytics or marketing (if enabled).
• Legal obligation: where we must comply with applicable laws.

Sharing and Processors

We share data with vendors that help us run the service:

• Hosting and platform services: Vercel (app hosting, analytics, performance).
• Database hosting: Neon Postgres.
• Email delivery: Brevo (transactional email sending and webhooks).
• File storage: Vercel Blob (image uploads and delivery).
• Authentication: Google and Apple (OAuth sign-in).
• Customer chat: Tawk.to (live chat widget), if enabled.

We do not sell personal data. We may share information with law enforcement or regulators where required.

International Transfers

Where data is processed outside the UK/EEA, we rely on appropriate safeguards as required by applicable law.

Data Retention

• Session records expire after 30 days by default.
• Wedding member invites expire after 7 days by default.
• OAuth state records expire after 10 minutes.
• We retain account and wedding data while your account is active and for a reasonable period afterwards for operational and legal purposes, after which it is deleted or anonymised.

Data Breach Response

If a personal data breach occurs that is likely to result in a risk to individuals, we will notify affected users and regulators where required by applicable law.

Account Deletion

If you wish to delete your account, contact amorly.weddings@gmail.com.

Your Rights

If you are in the UK/EEA, you may have rights to access, correct, delete, or export your information, and to object or restrict certain processing. Contact us at amorly.weddings@gmail.com to submit a request.

Cookies and Local Storage

We use cookies and local storage to keep you signed in and to remember interface preferences. Examples include session cookies, a sidebar state cookie, and local or session storage keys used to remember RSVP language and onboarding state.

Children

The service is not intended for individuals under 16. We do not knowingly collect personal information from children.

Changes

We may update this policy from time to time. We will post updates on this page and revise the “Last updated” date.