Privacy policy

1. Introduction

Welcome to WedKit ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding management platform and services.

By using WedKit, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account information (name, email address, phone number)
• Wedding details (date, venue, couple names, event information)
• Guest information (names, email addresses, phone numbers, dietary preferences, RSVP responses)
• Payment information (processed securely through third-party payment processors)
• Content you upload (photos, documents, custom messages)
• Communications with us (support requests, feedback)

2.2 Automatically Collected Information

When you use our services, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent on platform)
• Email engagement data (email opens, link clicks)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send invitations, reminders, and communications to you and your guests
• Manage RSVPs, meal selections, and seating arrangements
• Respond to your inquiries and provide customer support
• Send administrative information (account updates, security alerts)
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms of service

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Your Consent

We may share information when you explicitly consent to such sharing.

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf. Our current subprocessors include:

• Email delivery: Resend
• SMS messaging: Twilio
• Payments: Polar
• Authentication: Firebase (Google Sign-In)
• Cloud hosting and storage: Vercel, AWS S3
• Analytics: PostHog, Google Analytics, Meta (Facebook) Pixel and Conversions API
• Error monitoring: Sentry
• AI services: Google Generative AI (powers the optional guest-facing chatbot and admin assistant)

These providers may process data outside of Canada, primarily in the United States. They are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose information if required by law or in response to valid legal requests, such as court orders or subpoenas.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. SMS Messaging and Mobile Data

WedKit supports optional SMS notifications for wedding guests. Guests can opt in directly on the RSVP page by providing their mobile number and checking an explicit consent box before messages are sent. See our SMS Consent Process page for full details on how consent is collected.

• Message frequency varies based on wedding activity (for example invitations, RSVP reminders, meal reminders, and day-of updates).
• Message and data rates may apply.
• Guests can opt out at any time by replying STOP and can request help by replying HELP.

We do not sell personal information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent are used only to provide requested messaging services and to comply with legal and carrier requirements.

6. Data Storage and Security

We use commercially reasonable security measures to protect your information, including:

• Encryption of data in transit (TLS)
• Encryption at rest provided by our hosting and storage infrastructure (managed Postgres disk encryption, AWS S3 server-side encryption)
• Secure authentication and access controls
• Limited access to personal information on a need-to-know basis

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal requirements)
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Account Closure: Close your account and request data deletion

To exercise these rights, please contact us at support@wedkit.ca. We will respond to your request within a reasonable timeframe.

8. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: