Privacy Policy

This policy explains how Wedding Planora ("we", "us") processes personal data, in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

AG Performance, Buchholzstrasse 13, 8053 Zurich, Switzerland — support@weddingplanora.com

2. Data we process

Account data

When you create an account: first and last name, e-mail address, a password (stored only as a cryptographic hash), and your chosen username.

Planning data

The content you enter into the planner: budgets, tasks, vendors, notes — and guest information (names, contact details, dietary needs, RSVP answers). You enter your guests' data as the organiser of your event; please only add information you are entitled to share.

RSVP page

If you activate your public RSVP link, guests can search their own name and submit their attendance, dietary needs and an optional note. This data is stored in your guest list and visible only to you. Guests can be hidden from the public page at any time; contact details are never shown publicly.

Payment data

Payments are processed by Stripe Payments Europe Ltd. We never see or store your card number. Stripe's privacy policy applies to the payment process (stripe.com/privacy). We receive confirmation of payment and the product purchased.

Technical data

Our hosting providers process technical logs (IP address, browser type, time of access) to deliver and secure the service.

Guest photo gallery

If you activate the guest photo gallery, guests can upload photos via your personal link; each photo may carry the uploader's first name. Photos are stored with your account and are visible to anyone who has the gallery link. You can delete any photo at any time.

Collaborators

If you invite collaborators (partner, planner, family, vendor), we store their e-mail address, role and account link. Active collaborators can access the planning data of your wedding according to the role you assign; you can remove them at any time.

3. Purposes and legal bases

• Providing the planner and RSVP service (performance of contract)
• Processing payments and the free trial (performance of contract)
• Responding to support requests (legitimate interest / contract)
• Securing and improving the service (legitimate interest)

We do not sell personal data and we do not use advertising trackers.

4. Cookies and local storage

We use only technically necessary cookies/local storage to keep you logged in. No analytics or marketing cookies are set. Fonts are loaded from Google Fonts, which may transfer your IP address to Google when the page loads.

5. Processors and data location

• Supabase (database and authentication, hosted in the EU)
• Vercel (website hosting/CDN)
• Stripe (payment processing)
• Google Fonts (font delivery)

Where data is processed outside Switzerland/the EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses.

6. Data storage, backups and security

Your account and planning data are stored in a managed PostgreSQL database operated by Supabase on servers in the European Union, protected by encryption in transit, access controls and row-level security. Automatic daily backups are kept so that data can be restored in the event of a technical failure. Payment card data never reaches our systems — it is handled exclusively by Stripe.

Despite these measures, no online service can guarantee absolute availability or the impossibility of data loss. We recommend exporting critical information from time to time (e.g. your guest list as CSV and key documents as PDF — both available in the app). Our liability for data loss is limited as described in our Terms of Service.

7. Retention

Your data is kept while your account exists. If you delete your account (or ask us to), your planning data is deleted. Payment records are retained as required by commercial and tax law (up to 10 years in Switzerland).

8. Your rights

You have the right to access, rectify, delete and receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time. Contact support@weddingplanora.com. You may also lodge a complaint with the Swiss FDPIC or your local EU supervisory authority.

9. Guests' rights

If you are a wedding guest whose data was entered by a couple using Wedding Planora, the couple is responsible for that data as the organiser. You may contact them, or us, to have your data corrected or removed.

10. Changes

We may update this policy; the current version is always available on this page.