Privacy notice (draft structure)

Not final — owner and counsel review required

This product processes account, workspace, event, guest, RSVP, wishlist, and payment-related data to operate the celebration planner. The sections below describe typical categories; replace bracketed items with accurate details for your deployment.

Data controller

[Legal entity name and contact — owner to supply]

What we collect

• Account registration: email, password hash, optional display name
• Workspace and event content you enter (titles, venues, invitation copy)
• Guest household labels, optional emails, RSVP and wishlist activity
• Payment metadata from Stripe (handled according to Stripe's policies)
• Technical logs needed for security and rate limiting

How we use data

• Provide authentication, event management, and guest invitation pages
• Verify publication purchases and entitlements
• Protect the service from abuse

Sharing

Payment processing uses Stripe. MongoDB hosts application data per your infrastructure configuration. We do not describe third parties you have not actually engaged — list subprocessors here after review.

Retention & deletion

[Retention periods and deletion process — owner to define]

Your rights

[Jurisdiction-specific rights — counsel to define]

Contact · Product overview