Data processing agreement
Draft. This document describes what the product actually does, but a lawyer has not reviewed it yet. It must be read by one before commercial launch.
The agreement between the couple (controller) and us (processor). You accept it when you create a wedding.
Roles
The couple is the controller of the guests' data. We process it only on their documented instruction, which is their use of the product's features.
The instruction
Storing it, showing it to invited guests, sending invitations and reminders, making thumbnails, and exporting on request. Nothing else.
Security
Encryption in transit, access to a wedding only by holding its link or owning the account, isolation between weddings enforced on every query, and a log of privileged actions.
Sub-processors
We use the sub-processors listed on their own page. We give notice before changing them, and the list is versioned so a change is visible.
Helping the controller
We help you answer a guest’s request — access, rectification, erasure and export are features you use yourself, without waiting for us.
Afterwards
When a wedding is deleted or the agreement ends, we delete the data within the retention window described here.