← Back

Privacy Policy

Last updated: July 2026 · Forever Wedding Platform

1. Data Controller

Forever Wedding Platform is the data controller for personal data collected through this platform. For all privacy-related inquiries, contact us through the platform's support channel.

2. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you purchased
• Legitimate interests: Security monitoring, fraud prevention, service improvement
• Consent: Marketing communications (where applicable)
• Legal obligation: Financial records retention, compliance

3. Data We Collect

Account information: Full name, email address, phone number, hashed password, registration date, account status.

Wedding information: Couple names, wedding date, venue name and location, design preferences (colors, fonts, theme), language preferences.

Guest data: Guest names, phone numbers, email addresses (if provided), RSVP responses, meal preferences, transport requirements, attendance status.

Payment information: Package selected, add-ons chosen, total amount, payment reference, payment status, payment screenshots (for verification purposes). We do not store credit card details.

Uploaded content: Photos and videos uploaded by wedding guests via QR code at the venue, associated metadata (upload time, guest name).

Technical data: IP addresses, browser type and version, device type, pages visited, timestamps, error logs. This data is used for security and service improvement.

Feedback data: Ratings, satisfaction scores, referral source, Net Promoter Score responses submitted through our feedback system.

4. How We Use Your Data

• Creating and managing your digital wedding invitation
• Sending SMS invitations to your guests on your behalf
• Processing and verifying your payment
• Activating and maintaining your account
• Providing customer support
• Improving platform features and user experience
• Detecting and preventing fraud and abuse
• Complying with legal and financial obligations
• Analyzing service quality through aggregated, anonymized feedback

5. Data Storage & Security

All data is stored on enterprise-grade cloud infrastructure with the following security measures:

• Passwords protected using PBKDF2 hashing with 100,000 iterations and unique salt per user
• All data transmitted over encrypted HTTPS/TLS connections
• Media files stored in private cloud object storage with access controls
• Daily automated encrypted database backups
• Rate limiting and brute force protection on all authentication endpoints
• DDoS protection and Web Application Firewall
• Input sanitization to prevent injection attacks
• Security headers (HSTS, CSP, X-Frame-Options, etc.)
• Constant-time comparison for sensitive token operations

6. Third-Party Service Providers

We use the following categories of third-party service providers:

• Cloud infrastructure provider: Hosting, database, file storage, CDN, and DDoS protection
• SMS delivery provider: Sending personalized SMS invitations to wedding guests
• AI content moderation: Automated screening of uploaded photos for inappropriate content
• Email service provider: Sending transactional emails (account activation, password reset)

All providers are bound by data processing agreements and handle data only as instructed by us.

7. Guest Data & Your Responsibilities

When you upload a guest list to our platform, you represent and warrant that:

• You have the legal right to share those contact details with us
• Your guests have consented or have a legitimate expectation to receive wedding-related communications from you
• The information is accurate and up to date

Guest contact data is used exclusively for sending wedding invitations and collecting RSVPs. It is not used for marketing or shared with any other party.

8. Photo & Video Uploads

• All uploaded photos and videos are stored privately and accessible only to the registered couple
• Uploads are automatically scanned by AI for nudity, violence, and other inappropriate content
• Geolocation verification may be required before uploading (venue-based access control)
• Flagged content is reviewed by our team before being approved or removed
• Photos are deleted when you delete them or when your hosting plan expires

9. Feedback & Survey Data

We may present optional feedback surveys (satisfaction rating, Net Promoter Score, referral source). Participation is voluntary. Responses are stored anonymously and used only to improve our services. Individual responses are never shared publicly.

10. Data Retention

• Active accounts: Data retained for the duration of your plan
• After plan expiry: Account and wedding data deleted within 30 days
• Payment records: Retained for 7 years as required by financial regulations
• Security logs: Retained for 90 days
• Deleted accounts: All personal data removed within 30 days of deletion request

11. Your Rights

Under applicable data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Request that we limit processing of your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise any right, contact us through the platform. We will respond within 30 days.

12. International Transfers

Our infrastructure providers may process data in data centers located in the European Union and United States. All transfers are governed by appropriate safeguards including Standard Contractual Clauses where required.

13. Cookies & Local Storage

We use localStorage (browser storage) for:

• Authentication tokens (to keep you logged in)
• Language preferences
• Temporary upload progress

We do not use advertising cookies or third-party tracking. No cookie consent banner is required as we only use strictly necessary storage.

14. Children's Privacy

Our platform is intended for adults (18+) planning their wedding. We do not knowingly collect personal data from minors. If we discover that a minor has registered, we will delete their account immediately.

15. Data Breach Notification

In the event of a data breach that poses a risk to your rights, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users. The "Last updated" date at the top reflects the most recent revision. Continued use of our services after changes constitutes acceptance.

17. Contact & Complaints

For privacy inquiries, contact us through the platform's support system. If you believe we have not addressed your concern adequately, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.