Privacy Policy

This Privacy Policy explains how The Vow Page (the "Service", provided by UX CIRCLES Ltd, Company No. 15679514, a company registered in England & Wales, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ) collects, uses, stores and protects your personal data. It applies to all account holders (couples) using the Service, as well as guests who submit an RSVP through a public invitation page.

By using the Service, you confirm that you have read and agree to this Policy.

Account data: when you register with an email address and password, or a Google account, we collect your email address and store your encrypted login credentials via Supabase Auth.

Invitation content: the text you enter while editing your invitation - such as the couple's names, both families' details, the wedding date and time, venue information, the schedule and thank-you message - along with any photos you upload.

Guest list and RSVP replies: the guest names and notes you enter yourself in your dashboard, and the name, attendance, headcount, dietary requirements and messages guests submit via the public invitation page.

Payment data: payments are processed by Stripe. We only receive records such as whether a payment succeeded, the amount, and a transaction identifier - we never access or store your full card number.

Technical data: to keep the Service running and secure, we may log basic access records (such as timestamps and error messages) for debugging and abuse prevention.

To provide and operate the Service, including storing and displaying your invitation content, processing payments, and sending necessary service notifications (such as payment confirmations and account-related notices).

To convert the venue address you enter into map coordinates and a time zone via OpenStreetMap's Nominatim geolocation service, used to display the map and convert the event time on your invitation.

To improve the quality of the Service and troubleshoot technical issues.

We do not use your personal data for marketing purposes unrelated to the Service, and we do not sell your personal data to third parties.

To provide the Service, we use the following third-party providers to process certain data. These providers act only on our instructions and are each subject to their own privacy policy:

・Supabase: provides our database, account authentication and photo storage.

・Stripe: processes payment transactions - see Stripe's Privacy Policy for details.

・Google: provides Google Sign-In (OAuth).

・Google Analytics: with your consent, used to analyse site traffic and usage, helping us understand and improve the Service.

・OpenStreetMap (Nominatim): provides the geolocation service that converts addresses into map coordinates and time zones.

Other than where required by law or necessary to protect the Service and our users' rights, we do not disclose your personal data to any other third party.

The Service uses essential cookies to keep you signed in, remember your language preference, and support basic site functionality. These cookies cannot be turned off.

We also use Google Analytics cookies to understand site traffic and usage. These are only activated once you click "Accept" on the cookie banner shown on the site; you can choose "Reject non-essential" instead, or withdraw consent at any time by clearing cookies in your browser settings.

The Service does not currently use any advertising or marketing tracking cookies. If we introduce this in future, we will update this Policy and explain it separately.

A published invitation's web address remains publicly viewable for one year from the date of payment, after which it is automatically taken offline and no longer publicly accessible. The related content and settings (including your guest list and RSVP data) remain saved in your account until you delete the invitation or your account yourself, so you can review or republish it later.

If your account has not been signed into for more than two years, we reserve the right to clear or delete that account's draft content, photos and guest data at any time, without further notice. Please keep your own backup of anything important; we accept no responsibility for safekeeping, and no liability for any loss, resulting from such data clean-up.

If you delete an invitation or your account, the related invitation content, photos and guest reply data will be deleted from our systems; due to our backup processes, full removal may take a reasonable amount of time.

We use mechanisms such as Supabase's Row Level Security access controls to ensure that only the account holder can access or modify their own invitation content and guest data. We take reasonable technical and organisational measures to protect your data, but cannot guarantee absolute security.

You can view and edit the invitation content and guest data you've entered from your dashboard at any time, and can delete your invitation or your entire account yourself.

If you need further help accessing, correcting or deleting your personal data, please contact us at thevowpage@gmail.com and we will handle your request within a reasonable time.

Data submitted by guests via RSVP on a public invitation page is collected at the request of the account holder (the couple), who is the actual collector and controller of that data (the "Data Controller" under data protection law). We act only as a "Data Processor", providing storage and display at a technical level.

If you are a guest who submitted an RSVP and would like to access, correct or delete the data you provided, please contact the couple who invited you directly. If you're unable to reach them, you may also contact us at thevowpage@gmail.com and we will help.

The Service is not designed for use by children, and account registration requires you to have reached the legal age of majority. The "number of children" field in the RSVP form only collects a headcount, and does not separately collect children's names or other personally identifiable information.

We may update this Policy from time to time; the "last updated" date on this page will be revised accordingly. Where changes are material, we will notify you separately by reasonable means. Your continued use of the Service after any changes take effect constitutes your acceptance of the updated Policy.

If you have any questions about this Policy or your personal data, please contact us at thevowpage@gmail.com.