Privacy Policy
Last updated: July 6, 2026
This Privacy Policy explains how Planning Portal ("we," "us," or "our") collects, uses, shares, and protects personal information in connection with Planning Portal (the "Service"), a platform that lets couples create wedding websites, collect RSVPs, and manage gift registries.
Please read this policy carefully. By using the Service, you agree to the practices described here.
1. Who this policy covers
The Service involves two groups of people, and the way we handle data differs for each:
- Account holders — the couples and individuals who sign up, create an account, and build a wedding website. For this group, we act as a data controller (we decide how and why the data is used).
- Guests — the people invited to a wedding, who submit RSVPs, contact details, or interact with a registry through a site built on our platform. For guest data, we generally act as a data processor on behalf of the account holder, who is the controller of that information. The account holder decides what guest data to collect and how to use it; we process it to provide the Service.
If you are a guest and have questions about how your information is being used, please contact the couple whose wedding website you interacted with. You may also contact us using the details in Section 12.
2. Information we collect
2.1 Information you provide directly
From account holders:
- Name and email address (for account creation and authentication)
- Account credentials (managed securely through our authentication provider)
- Wedding details you choose to add to your site (event dates, locations, descriptions, photos, etc.)
- Billing information, if you purchase a paid plan (processed by our payment provider — see Section 4)
- Any messages or support requests you send us
From guests (submitted through a couple's website):
- Name
- Email address
- Mailing address
- Phone number
- RSVP responses (attendance, meal preferences, plus-ones, and any other fields the couple configures)
- Gift registry activity and messages, where applicable
2.2 Information collected automatically
When you use the Service, we and our infrastructure providers may automatically collect:
- IP address and approximate location
- Browser type, device type, and operating system
- Pages viewed, links clicked, and timestamps
- Referring URLs and basic usage analytics
2.3 Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. Essential cookies (such as authentication and session cookies) are required for the Service to function. You can control non-essential cookies through your browser settings or any cookie controls we provide. See Section 7 for more detail.
3. How we use information
We use personal information to:
- Create and manage accounts and authenticate users
- Build, host, and display wedding websites
- Collect and organize RSVPs and registry information on behalf of account holders
- Send transactional and confirmation emails, such as invite confirmations, RSVP confirmations, and account notifications
- Provide customer support and respond to inquiries
- Process payments and manage subscriptions (if applicable)
- Maintain the security, integrity, and reliability of the Service
- Detect, prevent, and address fraud, abuse, or technical issues
- Improve and develop features, and analyze usage trends
- Comply with legal obligations
We do not sell personal information, and we do not use guest contact details for our own marketing.
4. Third-party service providers (subprocessors)
We rely on trusted third parties to operate the Service. These providers process personal information only as needed to perform their functions and are bound by their own privacy and security commitments:
| Provider | Purpose | Data involved |
|---|---|---|
| Vercel | Application hosting and content delivery | Usage/log data, IP addresses, and any data transmitted while using the Service |
| Supabase | Authentication and database storage | Account credentials, account data, RSVP and registry data, guest contact details |
| Resend | Transactional and confirmation email delivery | Recipient names and email addresses, email content |
| Vercel Web Analytics | Usage analytics | Usage and device data |
We may update this list as our providers change. Where required by law, we enter into data processing agreements with these providers.
5. How we share information
We share personal information only in these circumstances:
- With service providers listed in Section 4, to operate the Service
- With account holders, who receive the RSVP and registry data submitted by their guests
- For legal reasons, when we believe disclosure is required to comply with a law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of our users or others
- In a business transfer, such as a merger, acquisition, or sale of assets, in which case we will take steps to ensure your information remains protected
- With your consent, or at your direction
We do not sell or rent personal information to third parties.
6. Data retention
We retain personal information for as long as it is needed to provide the Service and for the purposes described in this policy.
- Account data is retained while your account is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, accounting, or security reasons.
- Guest data is retained according to the account holder's use of the Service. When an account holder deletes their site or account, associated guest data is deleted or anonymized within a reasonable period.
- Backups and logs may persist for a limited additional period before being overwritten.
7. Cookies and tracking
We use the following categories of cookies:
- Essential cookies — required for authentication, security, and core functionality. These cannot be disabled without breaking the Service.
- Analytics/performance cookies — help us understand how the Service is used (if enabled).
You can manage cookies through your browser settings. Blocking essential cookies may prevent you from signing in or using key features. If we use any non-essential tracking, we will request consent where required by law.
8. Data security
We take reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls, and reliance on infrastructure providers that maintain industry-standard security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If we become aware of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law.
9. Your rights and choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you
- Correction — request that we correct inaccurate or incomplete information
- Deletion — request that we delete your personal information
- Portability — request a copy of your data in a portable format
- Objection / restriction — object to or restrict certain processing
- Withdraw consent — where processing is based on consent
- Non-discrimination — you will not be treated differently for exercising your rights
To exercise these rights, contact us using the details in Section 12. We will respond within the timeframe required by applicable law and may need to verify your identity first.
For guests: Because account holders control the data they collect, we may direct your request to the relevant couple or ask you to contact them directly. We will assist as required by law.
Region-specific rights:
- If you are in the European Economic Area or United Kingdom (GDPR/UK GDPR), you have the rights above and may lodge a complaint with your local supervisory authority.
- If you are a California resident (CCPA/CPRA), you have the right to know, delete, correct, and opt out of the sale/sharing of personal information. We do not sell or share personal information as those terms are defined under California law.
10. International data transfers
Our providers may store and process data in countries other than your own, including the United States. Where personal information is transferred across borders, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.
11. Children's privacy
The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
12. Contact us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
Planning Portal Email: japostol426@gmail.com
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.