Privacy policy

joinVows is a Portuguese wedding website service. Couples create the site, guests RSVP and choose gifts, and couples follow everything on a dashboard.

We are responsible for the data in couples' accounts. For any request about your data, write to support@joinvows.com.

When you create an account and your site, we keep:

• The account name and email. If you log in with Google, we receive only your name and email from Google.
• Your mobile number, if you choose to give it. It is optional, we use it only to help you with your site on WhatsApp or by phone, never for marketing, and you can remove it in Settings at any time.
• Your password, always encrypted. Nobody at joinVows can read it.
• What you write and upload to the site: your names, the date, the venues, the text and the photos.
• The IBAN and MB WAY number you give for gifts. We only show them to guests who choose a gift.
• Payments: the plan, the amount, the date and your tax number (NIF), if you give it. Card details are handled by Stripe and never pass through us.
• Technical data to keep the service secure, such as the date of your last visit and your IP address, for a short time.

The guest list belongs to the couple. The couple decides who to invite and what data to add; we store and process that data on the couple's behalf, only so the site works.

• Each guest's name and, if the couple adds them, their email or phone number.
• The replies on the site: whether they are coming, how many people they bring and any dietary requirements they give. Dietary requirements are only there so the couple knows about them.
• The gifts chosen and any message the guest leaves for the couple.

Guests' personal data is anonymised automatically 12 months after the wedding date. A guest who wants to see, correct or delete their data can speak to the couple or write to us at support@joinvows.com.

• To provide the service you signed up for: creating and publishing the site, receiving guests' replies, showing the dashboard and processing payments.
• To comply with the law: keeping payment records for as long as the law requires.
• Legitimate interest: keeping the service secure, preventing abuse and sending useful notices about your site, such as a part left unfilled. Each of these emails has a link to stop receiving them.
• With your consent: sending joinVows news, only if you ask for it. You can withdraw your consent at any time.

• We do not sell or rent data to anyone.
• We do not show ads, on the dashboard or on couples' sites.
• We do not use guests' data for anything beyond the couple's site.
• Couples' sites do not show up on Google or other search engines.

For joinVows to work, some data passes through companies that work for us. Each one only receives what it needs for its part and is bound by contract to protect it.

• Supabase: database, accounts and photos, on servers in the European Union.
• Vercel: hosting for the site and the dashboard.
• Stripe: payments by card, MB WAY, Multibanco and Klarna.
• Resend: sending the service's emails, from the European Union.
• Google: logging in with your Google account, if you choose it, and Google Analytics, only if you accept cookies.
• PostHog: visit statistics and, only if you accept cookies, click maps and recordings of visits, on servers in the European Union.
• Cal.com: bookings of the setup call, if you book one.

When any of these services processes data outside the European Union, it does so with the safeguards set out in the GDPR, such as the standard contractual clauses approved by the European Commission.

We always use the cookies the service needs to work, such as the one that keeps you logged in to the dashboard, and one that remembers your cookie choice for 6 months.

If you accept, we also use Google Analytics cookies (_ga), which tell us how the site is used: which pages you open, where you came from and where you give up. They stay in your browser for up to 13 months. We do not use them for advertising. If you decline, Google Analytics is not loaded.

If you accept, PostHog also stores a cookie (ph_) and records how the page is used: where you click, how far you scroll and where you stop. Everything you type is hidden and, in the dashboard, the text too, such as your names. We never record wedding sites, guest lists or gifts. Recordings stay in the European Union and are deleted after 30 days. If you refuse, PostHog is not loaded in your browser.

You can change your answer at any time under “Cookies” at the bottom of every page.

To learn which pages help and where people give up, we count visits with our own system, stored in our database in the European Union. It uses no cookies and does not keep your IP address. Your browser holds a random number while the tab is open and forgets it when you close it.

We record the page opened, the button pressed, the kind of device (phone, tablet or computer), the language and the site you came from. On a wedding site we only count visits and replies, never who the guest is.

When you are logged in to the dashboard, we link these records to your account, so we can see where the service makes things hard for you. We delete these records after 13 months.

A copy of these records goes to PostHog, on servers in the European Union, without the IP address, so we can analyse them. PostHog keeps them for 12 months.

• The account and the site, for as long as the account exists. The site stays online for the period of the plan you choose.
• Guests' data is anonymised 12 months after the wedding date.
• If you ask us to delete the account, we delete the account and site data, except what the law requires us to keep.
• Payment records, for as long as the law requires.
• Visit and error records, 13 months.

At any time, you can ask us to:

• See the data we hold about you and receive a copy.
• Correct wrong data.
• Delete the account and the data.
• Restrict or object to processing.
• Receive the data in a format you can take to another service.
• Withdraw consent you have given.

Just write to support@joinvows.com. We reply within one month, usually much sooner. If you think we have not handled your data properly, you can complain to the Portuguese data protection authority (Comissão Nacional de Proteção de Dados) at cnpd.pt.

Every connection to joinVows is encrypted. Each couple only has access to their own data, and passwords are stored encrypted. If there is ever a breach that affects your data, we will tell you and the authorities, as the law requires.

You must be at least 18 to create a joinVows account.

If we change this policy, we update the date at the top of the page. If the change is significant, we tell you by email before it takes effect.