Privacy Policy

The controller of your personal data is SweetlyInvited, Ds. O.G. Heldringstraat 161, 1185 CM Amstelveen, the Netherlands, Dutch Chamber of Commerce (KvK) number 91421543.

Write to us at [email protected].

Account data: your name and email address. Wedding content: the couple names, dates, venue details, story text, and any photos or media you upload. Guest data: the names, email addresses, attendance, and messages your guests submit through RSVP and guestbook forms. Technical data: anonymous usage and performance metrics.

Payments are processed by our payment provider, Stripe. Your full card details are entered on their secure hosted pages and are never stored on SweetlyInvited servers. We retain only the transaction reference, amount, currency, and status needed for accounting and refunds.

If a couple buys guest photo uploads, their guests can add photos to the couple's private gallery without an account. We store the original files, the name a guest chooses to give (if any), the upload time, and a one-way hash of the guest's network address combined with the wedding (to limit uploads per guest; the address itself is not stored). Only the couple can see or download the photos; they are never public and never used for anything else. The couple can delete any photo at any time. All guest photos are deleted 90 days after the wedding date, and the couple is reminded by email 30 days before.

We use your data to provide and operate the service: build and host your wedding site, generate AI media you request, collect RSVPs, process payments, send transactional emails (such as receipts and RSVP notifications), and provide support.

We share data only with the processors that run the service:

• Railway: hosting, database and file storage, in Amsterdam (EU)
• Cloudflare: content delivery and DNS
• Resend: sending our e-mails
• Google: sign-in with Google, and our business mailbox
• Stripe: payments
• Sentry: error reports
• Replicate · Anthropic: AI media, only when you explicitly request it
• PostHog: usage analytics, only after you accept analytics in the cookie banner

Your account, your invitation and your guests’ data are stored in the EU. Some providers are based in the United States; any transfer there relies on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. We do not sell your data.

You may request access to, correction of, export of, or deletion of your personal data, and you may withdraw consent for analytics at any time. To exercise these rights, contact us at the address below. Note that we may retain payment records for as long as required by law even after account deletion. You may also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

We use privacy-friendly analytics to understand how the site is used. Non-essential analytics load only after you accept them in the cookie banner; you can decline without affecting core functionality.

For any privacy question or request, email [email protected].