Privacy policy

The data controller is Juan José Pérez Barbancho, trading as “Barpes Tech”, with Spanish tax ID (NIF) 50614458Z. You can write to hola@weddea.com about anything related to this policy.

Your account. Your email address and, if you sign in with a password, an encrypted digest of that password (never the password itself). If you sign in with your Google account, we receive your email address, your name and your profile photo. This lets you sign in and tells us which wedding is yours.

Your wedding. Everything you write in the dashboard: names, dates, venues, budget, expenses and payments, suppliers, tasks, timeline, tables, music, documents you upload and the design of your invitation. We use it to provide the service, which is precisely to keep it and show it to you.

Your guests. What you write about them or what they reply: name, group, whether they are coming, allergies or dietary needs, plus-ones, use of the coach, assigned table and their answers to the questions you ask them.

Use of the website. We measure visits in aggregate and without cookies to know which pages are used. Each visit gives us the name of the screen, never the actual address: what you type into the search box, an invitation link or any identifier carried in the URL is deliberately left out. We don't build profiles or follow you around other websites. Only if you accept it in the cookie notice do we use the Meta Pixel to find out whether our ads work (see the cookie policy).

Our ads, only if you accept. If you accept marketing cookies, we tell Meta that you viewed our pages, that you created your account, that you created your wedding and that you sent your first invitation, together with your IP address, your browser and, when you create the account, your email address and your name turned into an irreversible code. We use this to measure our ads on Instagram and Facebook and to show them to similar people. Nothing about your wedding or your guests is ever sent, and nothing is sent from the iPhone and Android apps or from the invitations.

This is important and worth making clear: you are the ones who decide what data about your guests is kept, not weddea. We process it on your behalf and following your instructions, so that we can show you the replies and organise the tables.

This means that, if a guest wants to know what you keep about them or wants you to delete it, you are the first to answer. You can delete any guest from the dashboard, and if you need help, write to us.

It also means that we don't use your guests' data for anything of our own: we don't sell it, we don't pass it on and we don't write to their email addresses.

The invitation you send by WhatsApp works with a secret link: it deliberately doesn't ask for a password, because your guests aren't going to create an account just to say whether they're coming to the wedding.

That is why anyone who has that link can see the invitation and reply. Treat it as you would a paper invitation: you send it to the people you want to have it. If a link gets out of hand, you can revoke it from the dashboard and it stops working.

• Performance of a contract: to provide the service you asked for when you created the account.
• Consent: when a guest replies to the invitation, they are giving us their data voluntarily for that purpose.
• Legitimate interest: keeping the service secure and knowing, in aggregate, which parts are used.
• Consent also for marketing cookies and the events we send to Meta. You can withdraw it whenever you like under «Cookies», at the foot of the website, without affecting the above.
• Consent also for Weddi, the assistant: it sends nothing to Anthropic until you accept its permission, and you can withdraw it whenever you like in Settings, without affecting the above. Nothing it suggests changes your wedding until you confirm it.

Nobody buys or rents your data. To work, weddea relies on these providers, which process it on our behalf:

• Supabase — database and authentication. Data hosted in France (European Union).
• Vercel — website hosting and cookie-free visit measurement. Data hosted in the European Union and the United States, under standard contractual clauses.
• Google — if you choose to sign in with your Google account and, in the Android app, to send you the notifications you turn on (Firebase Cloud Messaging: it receives the text of the notification, with first names and the guest's comment, and the device identifier). Data hosted in the United States, under standard contractual clauses.
• Resend — sends weddea's emails: those for your account (confirming sign-up, recovering your password), welcome and news emails, the wedding planner's daily summary and the enquiries a couple sends to a business. Data hosted in the European Union (Ireland), with the company in the United States and standard contractual clauses.
• Stripe — only for businesses with a subscription: it charges the subscription and keeps the payment details, which weddea doesn't see. Data hosted in the European Union (Ireland) and the United States, under standard contractual clauses.
• Apple — in the iPhone app, if you choose to sign in with your Apple account and to send you the notifications you turn on (it receives the text of the notification and the device identifier). Data hosted in the United States, under standard contractual clauses.
• Anthropic — only if you use weddea's AI. If you ask for AI help when importing your guest list, it receives only the rows and columns we can't read, with email addresses and phone numbers hidden, and whatever those cells say (a name, a relationship, an allergy or a note), so it can suggest how to sort them; nothing else about the wedding. If you ask it to put your invitation together, it receives the couple's names, the date, the venue and city of the wedding, the names of the events in the programme, how many photos you have uploaded (not the photos), your answers to the quiz (setting, style, colours, tone, what you want to tell and the dress code), the sentence you write and the texts it suggests for the invitation, so they can be reviewed; never anything about your guests. If you ask it to write the greeting, the couple's names, the date, the venue and city of the wedding and the tone you choose. With Weddi, the assistant, what you write to it (including a guest list you paste) and the document you attach for it to read (the photo or PDF of a quote, an invoice or a contract: the photo downsized and the first three pages of the PDF), the couple's first names, the wedding date and the names of your categories, tables, groups, suppliers and moments of the day (with their times) and, for a wedding planner on her overview, the couples' names and the date of each of her weddings; never email addresses, phone numbers or diets from your list that you don't write yourselves. Its Claude model processes this through its API. According to its public policy for the API (checked on 20 October 2026), it does not use it to train its models and deletes it within 30 days at most, unless its systems flag it for breaching its usage policy, in which case it may keep it for up to 2 years, or the law requires it to keep it. Data hosted in the United States, under standard contractual clauses.

Meta Platforms Ireland Limited, only if you accept marketing cookies: we are joint controllers for collecting that data and sending it to Meta, and after that Meta processes it as controller under its own policy. It may transfer it to the United States under the EU-U.S. Data Privacy Framework.

We might also have to hand it over if a competent authority requires us to by law.

For as long as you keep your account open. You can delete yours from the app (Settings › Account & security, or «Delete my account» if you don't have a wedding yet). When you confirm, we immediately close your access and your sessions, and we delete your email address, your name, your password and your Google sign-in.

With each wedding you belong to, one of two things happens, and the app tells you which before you confirm: if someone else is also an owner, the wedding carries on with them and only you leave; if nobody else is an owner, the whole wedding is deleted with everything in it (guests and their replies, invitations, tasks, money, suppliers, tables, documents, photos and settings).

In the app and in the invitations, whatever is deleted stops being visible straight away. Documents and photos are then removed from our storage by an automatic background process, which repeats until it finishes if something fails; until then, a photo could still be opened from its direct address. We only keep a record that the account was closed, with an internal identifier and without your email address or your name, the access log without your email address or your IP address, and whatever we have to keep because of a legal obligation, such as invoices if there is ever a payment.

If your account belongs to a business (supplier or wedding planner), it is deleted from its dashboard, under Account. We first cancel your subscription, delete your profile, its photos and whatever is yours, and you immediately leave the weddings you were managing. The couples who wrote to you keep their conversation and their reviews, without your details: your business appears as «Business closed».

The file you upload to import guests is not kept: it is read on your device. If you ask for AI help, what has been read from it (the text in its cells) and what you go on reviewing are kept for a while in our database, in the European Union, so that the analysis can carry on even if you close the app. It is deleted when you import the list, when you cancel the analysis or, at the latest, after 24 hours. The AI only receives the unclear cells, without email addresses or phone numbers.

Backups overwrite themselves over time, so a deleted item may remain in a backup for up to 30 days before it disappears completely.

How to delete your account, also without the app, and what is deleted and what is kept, in Delete your account.

You have the right to access your data, correct it, delete it, restrict or object to its processing and take it elsewhere. To exercise these rights, write to hola@weddea.com from your account's email address; we'll reply within one month.

If you think we haven't handled it properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

Session. When you sign in, a cookie is stored that tells us it's you. It is essential: without it we would have to ask for your password on every screen.

Preferences. We store small things in your own browser, such as which notices you've already seen, so we don't show them to you again. They don't leave your device.

Measurement. We count visits without cookies and without identifying you.

Marketing, only if you accept. Meta's _fbp and _fbc cookies, for 90 days. We ask you in a notice with «Accept», «Reject» and «Settings», and you can change it whenever you like under «Cookies», at the foot of the page. The details are in the cookie policy.

weddea is a tool for organising a wedding and is not aimed at children under 14. If we become aware that we have kept data about a child without the permission of their parent or guardian, we delete it.

If we change this policy, we update the date at the top, and if the change is significant we let you know inside the app before it affects you.