Privacy Policy

Wedding Vault Platform In accordance with Regulation (EU) 2016/679 (GDPR) Last updated: 28 July 2026

1. Data Controller

Julien Salomon, registered in France under SIREN 101423614, with its registered office at 3 Rue Elzevir, 75003 Paris, is the data controller responsible for the processing of your personal data through the Platform.

Data Protection Contact: julien@wendyplanner.ai

2. Categories of Personal Data Collected

2.1 Organisers (Couples)

• Identity data: full name, date of birth, nationality.
• Contact data: email address, phone number, postal address.
• Financial data: bank account details (IBAN), information required for Stripe Connect onboarding.
• Identity verification documents: as required by Stripe for KYC/AML compliance.
• Account data: login credentials, account preferences.

2.2 Contributors (Wedding Guests)

• Payment data: card details (processed directly by Stripe; the Platform does not store card numbers).
• Contact data: name and optional email address (if the Contributor chooses to leave a message).
• Transaction data: contribution amount, date, and associated Wedding Vault.

2.3 All Users

• Technical data: IP address, browser type, device information, operating system.
• Usage data: pages visited, time spent, click patterns, referral source.
• Cookie data: as described in the separate Cookie Policy.

2.4 Photo Album

Where a couple enables the shared photo album:

• Photographs uploaded by the couple and by guests, together with the file's technical metadata (date taken, camera settings) and the name of the person who uploaded it.
• Engagement data: which photos you marked as favourites and any comments you wrote.
• Facial geometry templates: a numerical representation of the shape of a face, used to group photographs of the same person. This is biometric data within the meaning of Article 9(1) of the GDPR and is processed only where the guest concerned has given explicit consent. Section 9 describes this in full.

3. Legal Bases for Processing

Under Article 6 of the GDPR, the Platform processes your personal data on the following legal bases:

4. Data Sharing and Recipients

Your personal data may be shared with the following categories of recipients:

• Stripe Payments Europe, Ltd.: As the payment processor, Stripe receives financial and identity data necessary for processing payments, managing connected accounts, and complying with regulatory requirements. Stripe acts as an independent data controller for this processing.
• Functional Software, Inc. (Sentry): Error monitoring service that receives technical error data (stack traces, request paths, browser/OS metadata, and pseudonymous identifiers such as UUIDs) when bugs occur. IP addresses, email addresses, and request bodies are stripped before transmission. Processed under our legitimate interest (Art. 6(1)(f)) in operating a reliable service. Data is hosted in the EU.
• PostHog Inc.: Cookieless product analytics that receives pageview and event data without persistent identifiers or session replay. No cookies are set; no IP addresses are stored. Hosted in the EU.
• Hosting providers: Our infrastructure providers (located within the EU or in countries with an adequate level of protection) process data on our behalf under data processing agreements.
• Legal and regulatory authorities: When required by French or EU law, including tax authorities, AML/CFT authorities, and law enforcement.
• Professional advisors: Auditors, legal counsel, and accountants as necessary for the operation of the business.

The Platform does not sell your personal data to third parties. Data is never shared for third-party marketing purposes without your explicit consent.

5. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), the Platform ensures adequate safeguards are in place, such as:

• EU Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions by the European Commission (e.g., EU-US Data Privacy Framework where applicable).
• Binding Corporate Rules where applicable.

You may request a copy of the relevant safeguards by contacting us at the address provided in Section 11.

6. Data Retention

Personal data is retained only for as long as necessary for the purposes outlined in this Privacy Policy and in compliance with applicable legal obligations. Specific retention periods are set out in the table in Section 3.

Upon expiry of the retention period, data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

7. Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Article 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Article 16): You may request correction of inaccurate or incomplete data.
• Right to erasure (Article 17): You may request deletion of your data where it is no longer necessary, subject to legal retention obligations.
• Right to restriction (Article 18): You may request restriction of processing in certain circumstances.
• Right to data portability (Article 20): You may request your data in a structured, commonly used, machine-readable format.
• Right to object (Article 21): You may object to processing based on legitimate interests, including profiling.
• Right to withdraw consent (Article 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. If you enabled face search in a photo album, you can withdraw from the same place you opted in, and doing so erases your facial geometry template (see Section 9.5).
• Right to lodge a complaint: You may file a complaint with the Commission Nationale de l'Informatique et des Libertes (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr.

To exercise any of these rights, please contact us at julien@wendyplanner.ai. We will respond within one (1) month, extendable by two (2) months for complex requests, in accordance with Article 12 of the GDPR.

8. Security Measures

The Platform implements appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Access controls and authentication mechanisms.
• Regular security assessments and vulnerability testing.
• Incident response procedures compliant with the GDPR's 72-hour breach notification requirement.

9. Face Search in the Photo Album

Some wedding albums offer a "find photos of me" feature. It is off unless the couple turns it on, and even then nothing happens to you until you personally ask for it.

9.1 What it does

If you choose to use it, you either take a selfie or point at your own face in one album photograph. From that image the Platform computes a facial geometry template: a list of numbers describing the shape of a face. It compares that template against faces detected in the album's photographs and groups the ones that appear to be you.

The selfie itself is never stored. It is used to compute the template and then discarded.

9.2 Consent, and what happens without it

The template is biometric data used to identify you, so the legal basis is your explicit consent under Article 9(2)(a) of the GDPR. There is no pre-ticked box: the button you press is the agreement, and it says what it does.

Until at least one guest at a wedding has given that consent, the Platform performs no face processing at all on that album. Not "processes and discards": the analysis does not run.

Once someone has consented, the Platform detects faces across the album so it can find that person. Faces belonging to guests who have not consented are not identified and are linked to no name; where a template is held for such a face, it identifies nobody and is erased 90 days after the wedding (Section 9.4).

9.3 Who can see the result

Only you see the photographs grouped as yours. Other guests see that you chose to be findable, and nothing more. Anonymous visitors holding a shared album link never have access to this feature, and cannot see face groupings of any kind.

9.4 How long templates are kept

• Your template, and faces matched to you: kept while your consent stands.
• Templates matched to nobody: erased 90 days after the wedding date. Keeping them for that period is what allows a guest who opens the album later to be found in seconds instead of waiting for the whole album to be re-analysed.
• The record that a face is present in a photograph (its position in the image) is not biometric data, identifies nobody, and is kept for as long as the photograph is.

9.5 Withdrawing

You may withdraw at any time from the same place you opted in, or by contacting us. This takes effect immediately, and it is a deletion rather than a disconnection. The Platform erases your enrolment template, deletes every face record linked to you (the templates and the record of where your face was found), and removes your grouping entirely. Nothing is kept that would let a later analysis recognise you again.

To be clear about the limit: your photographs are not deleted, because you consented to face processing, not to being photographed. If new photographs are added later, an anonymous group of faces may form again, but it will never be connected to your name unless you consent again.

10. Automated Decision-Making

The Platform does not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you, within the meaning of Article 22 of the GDPR.

The face grouping described in Section 9 is automated processing, but it produces no decision about you: it filters which of the couple's photographs are shown to you, and its result can be corrected by you at any time by rejecting a suggested match.

11. Children's Data

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

Face search (Section 9) relies on consent that a minor cannot validly give for this purpose. It must not be used on behalf of a child, and where a photograph includes a child, no template is linked to them.

12. Contact Information

For any questions or requests related to this Privacy Policy or the processing of your personal data, please contact:

Julien Salomon 3 Rue Elzevir, 75003 Paris, France Email: julien@wendyplanner.ai SIREN: 101423614