Privacy Policy

OfficiallyTogether ("we," "us," "our") provides a private wedding site that lets couples build a wedding website, collect RSVPs, manage their guest list, and share photos. This Privacy Policy explains what personal information we collect through that service, why we collect it, who we share it with, and the choices you have.

By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Information we collect

Account information

When you create an account we collect your email address and an authentication credential (password or single-sign-on identifier). We may also collect your name and the names of the partners getting married when you provide them during onboarding.

Wedding and guest information

To run the Service we store the wedding details you enter (wedding date, event schedule, ceremony and reception locations, your subdomain choice, your wedding website content, and any text or images you upload). We also store the guest details you enter on your behalf, which may include guest names, optional email addresses, group or table assignments, RSVP responses, meal selections, dietary notes, and per-event invite codes.

Guest-submitted information

When your guests RSVP through your wedding site, we collect the responses they submit (attending or not attending, plus-one names if your seating allows them, meal choice, dietary notes, optional email for confirmation). Guests do not need to create an account to RSVP.

Photos and uploads

You and, where you enable it, your guests may upload photos and other media. We store these in a private cloud bucket and serve them only as needed to render your wedding site.

Payment information

When you purchase a paid feature pack, payment is processed by our payment provider (Stripe). We do not see or store your full card number. We retain a transaction reference, the amount, and which pack was purchased.

Technical information

When you visit our Service we automatically receive log data including IP address, user agent, and pages visited. We use this to operate, secure, and improve the Service.

Cookies and local storage

We use cookies and browser local storage for essential things: keeping you signed in, holding your unsaved workspace draft, and remembering your preferences. We do not use third-party advertising or cross-site tracking cookies.

2. How we use information

• To provide the Service: render your wedding website, accept RSVPs, deliver invite emails, store your guest list, process payments, and serve photos.
• To communicate with you about your account: confirmations, security notices, RSVP reply notifications you opt in to, and important Service updates.
• To keep the Service safe: detect abuse, fraud, and policy violations; protect users; debug.
• To improve the Service: anonymous, aggregated analytics on what features people use.
• To meet legal obligations.

We do not sell your personal information. We do not share your guest list or wedding photos with anyone except the service providers listed below who help us run the Service on your behalf.

3. Who we share information with

• Service providers we use to operate the Service: Supabase (database, authentication, file storage), Cloudflare (hosting, content delivery, security), Resend (transactional email), and Stripe (payments). Each provider is contractually limited to using your data only to perform their services for us.
• People you choose to share with: If you publish your wedding site, the content you publish is visible to anyone who has the link or your subdomain. If you set per-guest invite codes, only people with those codes can look up their RSVP.
• Legal requirements: We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of our users or the public.
• Business transfers: If we are acquired or merge with another company, your information may transfer to the new owner under a substantially similar privacy commitment.

4. How long we keep information

We keep your account and wedding data for as long as your account is active, plus a short retention period after deletion to allow you to recover from accidental deletion. After that, we delete or de-identify the data. Backups are deleted on the standard rotation of our service providers.

You can ask us to delete your account and the data associated with it at any time by emailing [email protected].

5. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), encryption at rest for our database and file storage, hashed passwords (you can never read them and neither can we), and least-privilege access for our team. No system is perfectly secure; if you believe your account has been compromised, contact [email protected] immediately.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can exercise most of these rights directly inside the dashboard (export your guest list as CSV, edit any field, delete content) or by emailing [email protected]. We will respond within a reasonable time and at no charge.

If you are in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, and the CCPA respectively. We honor those rights for all users.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can delete it.

8. International users

Your information may be processed in countries other than the one where you live. By using the Service, you consent to that transfer. We rely on standard contractual clauses and our service providers' data protection commitments where required.

9. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "last updated" date and, for material changes, notify you by email or through the Service before the changes take effect.

10. Contact

For privacy questions, requests, or complaints, email us at [email protected]. You can also reach us through our contact page.