Privacy Policy

Last updated: March 1, 2026

1. Data Controller

The data controller for personal data processed through the Wedding Website Builder platform ("Service") is Hexer - Maksymilian Skórnóg. If you have questions about how your data is handled, contact us at marketing.hexer@gmail.com.

2. Data We Collect

We collect data you provide directly: account information (name, email), wedding page content (names, dates, venues, photos, texts), and guest data entered through RSVP forms (names, emails, dietary preferences, attendance status). We also collect technical data automatically: IP addresses, browser type, device information, and usage analytics.

3. How We Use Your Data

We use your data to: provide and maintain the Service, display your wedding page to your guests, process RSVP submissions, send you important Service notifications, improve and develop new features, and comply with legal obligations. We do not sell your personal data to third parties.

4. Legal Basis for Processing (GDPR)

We process personal data based on: contract performance (providing the Service you signed up for), legitimate interest (improving the Service, preventing abuse), consent (optional analytics, marketing emails), and legal obligations (tax records, law enforcement requests). You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing

We share data with: Convex (database hosting and backend infrastructure), payment processors (for Premium purchases), and analytics providers. All third-party processors are bound by data processing agreements. Your wedding page content is publicly accessible at its URL when published - this is the core function of the Service.

6. Guest Data and Your Responsibilities

When you collect guest data through RSVP forms (names, emails, dietary needs, etc.), you act as the data controller for that data. You are responsible for informing your guests about data collection and obtaining any necessary consent. We act as data processor, handling guest data only as needed to provide the Service.

7. Data Retention

Account and wedding page data is retained while your account is active. After account deletion, we remove your data within 30 days, except where retention is required by law (e.g., payment records for tax purposes). RSVP and guest data is deleted along with the associated wedding page.

8. Your Rights

Under GDPR and applicable laws, you have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise these rights, contact us at marketing.hexer@gmail.com. We will respond within 30 days.

9. Cookies and Tracking

We use essential cookies required for the Service to function (authentication, session management). We may use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings. The Service does not use third-party advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or through the Service. The latest version is always available on this page with the effective date shown above.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at marketing.hexer@gmail.com.