Privacy Policy

1. Who we are

desiweddinginvite is a service operated by Nexaton Solutions ("Nexaton", "we", "us", "our"), a company registered in the Netherlands (KVK 42003548, VAT NL005427112B27). We are the data controller for the personal data described in this policy, except for the guest data you upload, where you are the controller and we act on your behalf (see section 5).

This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have. If you have any questions, email us at [email protected].

2. The data we collect

Data you give us as a host

• Account data: your name, email address and a hashed password.
• Your wedding content: event names, dates, times, venues, descriptions, dress codes, photos and any text you add to your invite.
• Guest data you provide: your guests' names, phone numbers, email or postal addresses, family side and relationship, dietary preferences, plus-ones, and which events each guest is invited to.
• Co-host data: the names and email addresses of people you invite to help manage your invite.

Data your guests give us

• RSVP responses, dietary choices, addresses, guestbook messages, song requests and shuttle sign-ups that your guests submit through their personal link.

Data collected automatically

• Payment data: if you buy Premium, payment is handled by our payment processor. We never see or store your full card details; we receive confirmation of payment and limited billing information.
• Technical data: IP address, browser and device type, and basic usage data, together with the essential cookies described in section 10.

3. How we use your data

• To provide and operate the Service and your invite.
• To deliver invites, collect RSVPs, and show each guest their events.
• To process Premium payments and meet our tax and accounting duties.
• To send you service emails (for example account, security and co-host messages).
• To keep the Service secure and prevent fraud and abuse.
• To understand and improve the product, in aggregate.

4. Our legal bases (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Contract: to provide the Service you have signed up for.
• Legitimate interests: to secure the Service, prevent abuse, and improve the product.
• Consent: where we ask for it (for example any optional cookies or marketing). You can withdraw consent at any time.
• Legal obligation: to keep records we are required to keep, such as invoices.

5. Guest data and your responsibilities

When you add guests, you decide what data to collect and why, so for that guest list you are the data controller and we act as your processor: we handle it only to provide the Service to you and on your instructions. By uploading guest data you confirm that you have a lawful basis to share your guests' details with us and to contact them about your wedding, and that you will handle their data responsibly. The data-processing commitments that apply between us are set out in our Terms and Conditions.

6. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us run desiweddinginvite, under contract and only as far as needed to provide the Service:

• Cloud hosting and managed-database providers, to run the app and store your data.
• Stripe, to process Premium payments.
• Resend, to send transactional emails such as account and co-host messages.

We may also disclose data where we are required to by law, or to protect our rights, users or the Service.

7. International transfers

We are based in the European Union and process data in the European Economic Area (EEA) where we can. Because our hosts and their guests are spread across the diaspora, your data (and your guests' data) may be transferred to and stored in countries outside your own. Where we transfer personal data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. How long we keep your data

We keep your account and invite for as long as your account is active, so your wedding page and its memories stay available to you. You can delete individual guests, content, or your whole account at any time. When you delete your account we remove your personal data within a reasonable period, except for limited records we must keep to meet legal obligations (for example invoices).

9. Your rights

Under the GDPR and similar laws, you can ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; and provide it in a portable format. You can also withdraw any consent at any time. To exercise any of these rights, email [email protected]. You also have the right to complain to a supervisory authority, such as the Dutch Autoriteit Persoonsgegevens or your local data-protection regulator (for example the UK ICO).

10. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to keep the Service secure. We do not use advertising or third-party tracking cookies. Because these cookies are essential to the Service, they do not require consent; if we ever add analytics or marketing cookies, we will ask for your consent first.

11. Security

We protect your data with measures including encrypted connections (HTTPS), hashed passwords, access controls, and per-invite privacy: guest lists are private by default and each co-host sees only their own side. No system is ever perfectly secure, but we work hard to keep your data safe.

12. Children

desiweddinginvite is intended for adults planning a wedding and is not directed at children. We do not knowingly collect personal data from anyone under 16.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "last updated" date above, and we will let you know of significant changes where appropriate.

14. Contact

Nexaton Solutions · KVK 42003548 · VAT NL005427112B27
Email: [email protected]