Privacy Policy

Last updated: September 30, 2026 · Applies to ivow.ca

1. Who we are

iVow ("we", "the platform") provides wedding invitation websites, guest management, and related tools. Contact: [email protected]. This policy explains what we collect, why, and your rights over it.

2. The two roles you should know

• Couples (the "controller") choose their guests, see guest RSVPs, meals, and messages, and decide what to do with that information.
• iVow (the "processor") stores and transmits that information only on the couple's instructions, to provide the service.

If you're a guest, the couple is responsible for your invitation data; we process it for them. Questions about a specific invitation are usually best directed at the couple — but you can always exercise your rights with us directly (section 8).

3. What we collect

• Couples: partner names, wedding date/venue, story, photos/videos you upload (including an optional welcome video for guests), your email (used for login codes), and site content. Payment details go to Stripe — we never see card numbers.
• Guests: name, email, phone (if the couple adds it), RSVP responses, party size, meal choice, plus-one/children's names, any message or dietary note entered, and answers to optional RSVP questions the couple chooses to ask (e.g., shuttle plans, song requests).
• Planner content: your private notes, to-dos, and budget entries (expense descriptions and amounts you type, including any due dates and priority levels you set) and private per-guest notes. These are visible only to you and your partner, stored with your event, and removed when the event is deleted.
• Dietary & allergy notes are health-related. They're collected only so the couple can cater safely, are shown to the couple only, and you should only enter them if you're comfortable sharing them with the couple and their caterer.
• Children's data: the couple may add children (for kids' meals/seats). Parents/guardians may request deletion at any time.
• Technical: when a guest opens an invitation we note the open time and approximate city/country (and city-level coordinates of the first open) for support and abuse prevention. We store only a masked IP address (e.g. 203.0.113.0) — never a full IP. This approximate location is visible to the couple's support contact at iVow when assisting them; it is not shown to guests or other couples.

4. What we never do

• No advertising, no trackers, no sale of personal data, no third-party analytics cookies. We use only the session and on-device storage needed to keep you signed in and remember preferences (like the invitation page language).
• No marketing emails to guests. Guests receive only the couple's invitation-related messages, each with an unsubscribe link for reminders.

Support access. Authorized iVow staff can access event data to operate the service and to help you when you ask (troubleshooting, requested edits, resending messages). Staff use is logged and limited to legitimate support purposes. Your planner is not displayed in our admin tools. Like the rest of your event data, it is included only in a complete event export — which you can request at any time, and which staff can generate solely for support or data portability.

5. Who processes data for us (sub-processors)

• Supabase — database and file storage (guest data, uploaded media).
• Resend — email delivery (sends to your email provider).
• Google Fonts — page typography (your browser contacts Google; their own policy applies).
• Geo lookup — a guest's IP is looked up server-side, once, to derive city/country; the result stays with us.

6. Retention

Invitation data is kept while the couple's event exists, so RSVPs and history stay intact. Deleting a guest deletes their record (including RSVPs and tracking). Couples can export or delete their event at any time; contact us to purge an account entirely. Backup copies age out within 30 days.

7. Security

Transport encryption (HTTPS), hashed/expiring login sessions, rate limiting, access controls on every API, and masked IP storage. No system is perfect — if we ever discover a breach affecting your data, we'll notify affected couples and applicable regulators as required by law.

8. Your rights (GDPR / CCPA / PIPEDA)

• Access & portability — see everything we hold about you.
• Rectification — fix anything that's wrong.
• Erasure — be deleted.
• Objection / restriction — including opting out of reminder emails (one click, any email footer).

Self-serve: open your personal invitation link and use Manage your data at the bottom of the page (or add ?g=YOUR-TOKEN). Or email us: [email protected] — we verify your link/token and act within 30 days. European residents can also complain to their supervisory authority; California residents have non-discrimination rights; we're based in Canada and comply with PIPEDA.

9. Changes

If we change this policy we'll update the date above and, for significant changes, tell couples by email. Continued use after the update means acceptance.