Wedding.io Logo

Privacy Policy

Weddings.io Inc.
Last Updated: August 2025


1. Introduction

Weddings.io Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI wedding planning platform.

Our Commitment: We operate from Ontario, Canada, and comply with applicable privacy laws including the Personal Information Protection and Electronic Documents Act (PIPEDA), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other regional privacy regulations.


2. Information We Collect

Personal Information

From Users (Couples):

  • Name, email address, phone number
  • Wedding date and location preferences
  • Guest count and budget information
  • Photos and content uploaded to the platform
  • Communication preferences and wedding style preferences

From Vendors:

  • Business name, contact information, and business registration details
  • Service descriptions, pricing, and availability
  • Portfolio images, videos, and promotional content
  • Payment and billing information (processed through third-party providers)
  • Business credentials and licensing information

Technical Information

  • IP address and device information
  • Browser type and operating system
  • Platform usage data and analytics
  • Cookies and similar tracking technologies
  • Log files and error reports

Communication Data

  • Messages between users and vendors on the platform
  • Customer support communications
  • Email interactions and preferences

3. How We Use Your Information

Platform Operations

  • Facilitate connections between couples and wedding vendors
  • Provide AI-powered wedding planning tools and recommendations
  • Process vendor subscriptions and manage accounts
  • Deliver customer support and technical assistance

Marketing and Communications

  • Send platform updates and feature announcements
  • Share relevant vendor promotions with users (with consent)
  • Conduct market research and platform improvements
  • Create aggregated, anonymized analytics

Legal and Business Purposes

  • Comply with legal obligations and regulations
  • Prevent fraud and ensure platform security
  • Enforce our Terms and Conditions
  • Facilitate business transfers or acquisitions

4. Information Sharing and Disclosure

Vendor-User Connections

  • User information is shared with vendors when users express interest
  • Vendor contact information is displayed to users browsing the platform
  • Communication facilitation between parties through our messaging system

Service Providers

  • Payment processors (we do not store credit card information)
  • Cloud hosting and data storage providers
  • Email and communication service providers
  • Analytics and marketing platforms

Legal Requirements

  • Law enforcement when required by valid legal process
  • Regulatory authorities as mandated by law
  • Protection of our rights, property, or safety of our users

Business Transfers

  • In connection with mergers, acquisitions, or asset sales
  • Users will be notified of any ownership changes

We do not sell personal information to third parties for monetary consideration.


5. Content and Intellectual Property

Uploaded Content

  • You retain ownership of content you upload
  • You grant us a license to use content for platform operations and marketing
  • We may use uploaded content to improve our AI tools and services
  • Content may be featured in marketing materials and platform promotion

Data Retention

  • User accounts: Retained until account deletion requested
  • Vendor accounts: Retained for business and legal compliance purposes
  • Content: May be retained for platform operations even after account deletion
  • Communication records: Retained for customer service and legal purposes

6. Your Privacy Rights

All Users

  • Access your personal information
  • Correct inaccurate information
  • Request account deletion
  • Opt-out of marketing communications
  • Data portability (where technically feasible)

Additional Rights by Region

European Union (GDPR):

  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to object to processing
  • Right to data portability
  • Right to lodge complaints with supervisory authorities

California (CCPA):

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale of personal information
  • Right to non-discrimination for exercising privacy rights

Canada (PIPEDA):

  • Right to access personal information
  • Right to challenge accuracy and completeness
  • Right to file complaints with Privacy Commissioner

Exercising Your Rights

To exercise your privacy rights, contact us at: [privacy@weddings.io]

Response Time: We will respond to requests within 30 days (or as required by applicable law).


7. Data Security

Security Measures

  • Encryption of data in transit and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and employee training
  • PCI DSS Level 4 compliance for payment processing
  • Secure data centers with physical and digital protections

Data Breach Response

  • Immediate investigation and containment
  • Notification to affected users within 72 hours (where required)
  • Reporting to relevant authorities as mandated by law
  • Remediation measures and prevention improvements

8. International Data Transfers

Cross-Border Processing

  • Data may be processed in Canada and other countries
  • We ensure adequate protection through appropriate safeguards
  • EU users: Data transfers comply with GDPR adequacy requirements
  • Standard Contractual Clauses used where necessary

Data Location

  • Primary servers located in Canada
  • Backup and disaster recovery systems may be international
  • Service providers may process data in various jurisdictions

9. Cookies and Tracking Technologies

Types of Cookies

  • Essential: Required for platform functionality
  • Analytics: Help us understand platform usage
  • Marketing: Enable personalized advertising (with consent)
  • Preference: Remember your settings and preferences

Cookie Management

  • You can control cookies through browser settings
  • Disabling certain cookies may limit platform functionality
  • Third-party cookies are governed by respective privacy policies

Do Not Track

  • We currently do not respond to Do Not Track signals
  • Your privacy preferences can be managed through your account settings

10. Children's Privacy

Our platform is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information immediately.

Parental Rights: Parents or guardians may contact us to review, delete, or refuse further collection of their child's information.


11. Changes to This Privacy Policy

Updates and Modifications

  • We may update this policy to reflect changes in our practices or legal requirements
  • Material changes will be communicated via email or platform notifications
  • Continued use of the platform constitutes acceptance of updated terms
  • Previous versions will be archived for reference

Notification Timeline

  • Major Changes: 30 days advance notice
  • Minor Updates: Notice upon next platform visit
  • Legal Requirements: Immediate implementation with prompt notification

12. Contact Information

Privacy Inquiries

Email: [privacy@weddings.io]
Phone: [Your phone number]
Mail: Weddings.io Inc.
[Your complete address]
Ontario, Canada

Data Protection Officer

For GDPR-related inquiries: [dpo@weddings.io]

Regulatory Contacts

  • Canada: Office of the Privacy Commissioner of Canada
  • EU: Your local Data Protection Authority
  • California: California Attorney General's Office

13. Jurisdiction-Specific Information

Canadian Users (PIPEDA)

  • Complaints may be filed with the Privacy Commissioner of Canada
  • We adhere to the 10 Privacy Principles under PIPEDA
  • Personal information is collected for identified purposes only

European Users (GDPR)

  • Legal basis for processing: Legitimate interests, contract performance, consent
  • Data Protection Impact Assessments conducted for high-risk processing
  • EU representative: [If applicable]

California Users (CCPA)

  • We do not sell personal information as defined by CCPA
  • Detailed information about data collection available upon request
  • Non-discrimination policy for privacy rights exercise

This Privacy Policy is governed by the laws of Ontario, Canada, and applicable international privacy regulations. For questions or concerns, please contact our privacy team.