Privacy policy
Last updated: May 2026
1. Data controller
CODEV24 VOF, Chamber of Commerce (KvK) number 42085631, established at Hanekerweg 4, 7381 AM Klarenbeek, the Netherlands, is the data controller for the personal data collected via weddingsplanner.app. Contact: privacy@weddingsplanner.app
2. What data do we collect?
- Account data: email address, name, hashed password, language preference.
- Wedding data: partners' names, date, guest list (entered by you), budget, texts, seating chart.
- Payment data: processed by Mollie (we do not store card numbers ourselves). We keep a Mollie payment ID and invoice number.
- Technical data: IP address at sign-in (for security auditing only), session cookies.
3. For what purpose?
- Providing the planning services for which you created an account.
- Sending transactional email (welcome, RSVP confirmation, reminders) via Brevo.
- Accounting (Zoho Books) for tax obligations.
- Security and fraud prevention.
4. Data of wedding guests
When you import your guest list, you are the data controller for that data — we are the processor. You must inform your guests yourself and have their consent to share their data with us. We never share guest data with third parties.
5. Retention periods
- FREE accounts: wedding data is kept as long as your account is active. Inactive FREE accounts (no sign-in for 3 years) are deleted after an email warning.
- Paid accounts (Complete/Ultimate/Pro): lifetime upgrade = lifetime data retention as long as the account exists. You paid for permanent access.
- Guest data (guest list, RSVP) for FREE accounts: automatically deleted 90 days after the wedding date; the wedding file itself remains. This protects your guests' privacy. For paid accounts, guest data is kept for as long as the account exists; you can delete it yourself at any time.
- Payment data: 7 years (Dutch statutory tax retention period), also after account deletion, in anonymised form.
- Server logs: 30 days.
6. Processors (sub-processors)
- Hetzner Online GmbH (Germany) — hosting
- Mollie B.V. (the Netherlands) — payments
- Brevo (Sendinblue SAS) (France) — transactional email
- Anthropic PBC (US) — Claude AI (DPF certified, data is not used for model training)
- Zoho Corporation (EU) — accounting
- Sentry / Functional Software (US) — error monitoring (optional, DPF)
7. Your rights (GDPR art. 15-22)
- Access: download your data via /instellingen → “Download my data”.
- Rectification: change your data directly in the app.
- Erasure (“right to be forgotten”): /instellingen → “Delete account”.
- Restriction and objection: send an email to privacy@weddingsplanner.app.
- Data portability: via the same export button, JSON format.
- Complaint: with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
8. Security
Communication is always over HTTPS (TLS 1.3). Passwords are hashed with bcrypt. Access to production systems is restricted and audited. Daily backups within the EU.
9. Changes
We will inform you by email of any important changes. The most recent version can always be found on this page.