Privacy

1. Who is responsible

The data controller is the company identified at the foot of this page.

To exercise any right or ask a question, write to contact@vowlyplan.com.

2. What we keep

Account: name, email, password (stored hashed, never in clear text) and language.

Wedding: everything you write in the tool — date, venue, budget, suppliers, guests, tables, gifts, schedule, notes, photos and documents you upload.

Payment: the checkout session id, the amount and the email used. Card details are handled by Stripe and never reach us.

Technical: server error logs, no browsing profiles. No advertising or tracking tools.

Advertising: if you arrived through a Google ad, we store that click's identifier with your account and send it back to Google to tell it the ad worked. There are no Google scripts on the site, no third-party cookies, and we do not follow you elsewhere.

3. Why

To provide the service you signed up for — that is the legal basis (performance of the contract).

To send service emails: invitations you send, payment confirmation, important notices.

To meet legal obligations, such as tax records for sales.

No automated decisions, no marketing profiles.

4. Other people's data

Your guest list contains third-party data. We process it only to store and show what you wrote: you decide what goes in.

Keep only what you need — who is coming, with whom, and the dietary note the venue requires.

5. Who the data talks to

Cloudflare — hosting, database and files, processed in the European Union wherever possible.

Stripe — payments.

Resend — service email delivery.

Nobody else. We do not sell, rent or share data for commercial purposes.

6. How long

For as long as you have an account. If you ask for deletion, the account and wedding are erased within 30 days.

Billing records are kept for the period tax law requires.

7. Your rights

Access, correction, erasure, restriction, objection and portability. One email is enough.

You may also complain to the Portuguese data protection authority (cnpd.pt).

8. Security

Passwords are stored with PBKDF2 and a per-user salt. The connection is always encrypted.

Photos and documents live in private storage behind unguessable addresses.

No system is perfect: if a breach affects you, we will tell you and the authorities within the legal deadlines.

9. Cookies

Only what the service needs: your signed-in session and your preferences (language, units, view) are kept in your browser. No advertising or analytics cookies, so no cookie banner.

10. Changes

In force since 15 August 2026.