Privacy Policy

1. Data Controller

The controller responsible for the processing of your personal data under the General Data Protection Regulation (GDPR) is:

2. Data We Collect

When you use Vœu, we may collect and process the following categories of personal data:

• Account data: your name, e-mail address, and authentication credentials.
• Wedding details: partner names, wedding date, venue name and location, and other planning information you choose to enter.
• Guest information: the names, e-mail addresses, and phone numbers of guests you add to your guest list, plus the RSVP responses, meal preferences, dietary requirements, and messages guests submit themselves via their personal RSVP link.
• Usage data: browser type, device identifiers, pages visited, and interaction events collected via analytics tools for the purpose of improving the service.
• Payment data: billing information processed on our behalf by Stripe. We do not store full card details on our servers.
• Push notification tokens: if you grant permission, we store a device push-notification subscription to send you reminders.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Art. 6(1)(b) GDPR — Performance of a contract: processing your account data and wedding details is necessary to provide the Vœu planning service you have signed up for.
• Art. 6(1)(a) GDPR — Consent: sending push notifications and optional marketing communications is based on your explicit consent, which you may withdraw at any time in your profile settings.
• Art. 6(1)(f) GDPR — Legitimate interests: we may process aggregated, anonymised usage data to improve the security and functionality of the platform.

4. How We Use Your Data

• To create and manage your account and wedding workspace.
• To allow you to manage your guest list and RSVP collection.
• To send RSVP reminder e-mails to your guests (only when you explicitly trigger this action).
• To process subscription payments via Stripe.
• To send push notifications about task deadlines and planning milestones (with your consent).
• To comply with legal obligations and prevent fraud.

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only with trusted processors who help us deliver the service, under data processing agreements, including:

• Supabase — authentication and database hosting.
• Stripe — payment processing.
• Resend — transactional e-mail delivery.
• Cloudflare R2 — media file storage.

All processors are contractually bound to process data only on our instructions and in accordance with GDPR.

6. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, we delete all associated personal data — including your wedding details and guest list — within 30 days, except where we are required to retain it for legal or accounting purposes (for example, billing records, which we retain for seven years under Austrian tax law).

7. Your Rights Under GDPR

As a data subject you have the following rights:

• Right of access (Art. 15 GDPR): you may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): you may ask us to correct inaccurate data.
• Right to erasure (Art. 17 GDPR): you may request deletion of your data, subject to any legal retention obligations.
• Right to data portability (Art. 20 GDPR): you may request your data in a structured, machine-readable format.
• Right to restriction of processing (Art. 18 GDPR): you may ask us to restrict how we use your data in certain circumstances.
• Right to object (Art. 21 GDPR): you may object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@voeu.app. We will respond within one month.

8. Cookies and Similar Technologies

Vœu uses strictly necessary cookies to maintain your authenticated session. We do not use advertising cookies. If we introduce analytics cookies in the future, we will request your consent before doing so.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction. These include encrypted data transmission (TLS), access controls, and regular security reviews. However, no system can be guaranteed to be completely secure.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian data protection supervisory authority:

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by e-mail or by displaying a notice in the app. Continued use of Vœu after the effective date of a revised policy constitutes acceptance of the new policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at privacy@voeu.app.