Privacy Policy
Draft · [Effective date]
This page explains what information Wedvero collects, why we collect it, and how couples, guests and professional collaborators can control it. It is written in plain language on purpose — the legal detail behind it still needs a lawyer's review.
Who we are
ZZP Daniel Orosz · OROS Agency, registered at Kievitstraat 25, Kerkrade, Netherlands under Chamber of Commerce number 98242482 (VAT NL005319090B91), operates Wedvero. For questions about this policy, contact privacy@wedvero.com.
Wedvero plays two different roles under data protection law, and which one applies depends on whose data it is. For account and billing information (your name, email, password and payment status), Wedvero is the controller: we decide why that data is collected and how it is used. For the content a couple puts into their own wedding, such as guest names and their replies, Wedvero acts as a processor instead. The couple is the controller of that data, we only handle it on their instructions, and this policy describes how we do that.
What we collect
We collect only what the product needs to run. This covers everything Wedvero holds, whether it comes from you directly, from a couple who invited you, or from using the site.
- Account data
- Name, email address, password hash and language preference, for anyone who creates a Wedvero account.
- Wedding content
- The couple's own text, schedule, locations, tasks, budget entries and vendor notes: everything they build inside their wedding plan.
- Guest data
- Name, the contact details the couple supplies, their reply, meal choice, dietary or accessibility notes, and plus-one requests.
- Payment data
- Handled by [Payment provider]. Card details never reach Wedvero's servers; we receive only the payment status and an invoice reference.
- Technical data
- IP address, browser and device type, timestamps and error logs, collected automatically to keep the service running and secure.
- Marketing-site analytics
- Aggregated page and CTA (call-to-action) events from wedvero.com, not tied to an individual visitor profile.
How we use it
Each use below has a lawful basis under the GDPR, shown in brackets.
- Providing the wedding website and the plan behind it [contract]
- Processing payment for the Wedding Pass [contract]
- Keeping the service secure and debugging problems when they come up [legitimate interest]
- Answering support requests [contract/legitimate interest]
- Improving the marketing site, using aggregated event counts rather than individual profiles [legitimate interest]
- Sending service emails about the couple's own wedding, such as reply notifications and plan updates [contract]
We do not build an advertising profile of you, and we never sell your data.
Guest data
If you were invited to a wedding on Wedvero, here is what that means for your information.
- Your answers are visible to the couple and to the collaborators the couple has explicitly given permission to. They are never public, and never visible to other guests.
- You can reopen your invitation link at any time to change or withdraw your answer.
- Dietary and accessibility notes are collected only because the couple needs them for catering and access. That information stays inside the wedding it was given for and is not used for anything else.
- You can ask the couple, or Wedvero directly, to remove your entry.
Who can see what
Access on Wedvero follows the permissions a couple sets, not someone's profession or what they paid.
Profession does not equal permissions. Recommendation does not equal access. Payment does not equal ownership.
- A photographer sees only the sections of the wedding the couple has granted them: nothing more.
- A venue sees only the published version of the service plan, not the couple's private planning underneath it.
- Whoever pays for the Wedding Pass (the couple, a relative, a professional) gains no access to the wedding by paying for it.
No tracking on guest pages
Invitation and reply pages carry no marketing pixels, no session replay and no third-party advertising trackers. The people answering an invitation are guests, not an audience.
The marketing site at wedvero.com uses first-party, aggregated event counts only. There is no cross-site tracking.
One exception: a referral code is stored in a first-party cookie (wv_ref) for 30 days, so a partner discount can be applied at checkout. That cookie identifies a partner code, not a person.
Retention and deletion
- Wedding content stays available for the 24-month access period included in the Wedding Pass.
- Guest data is deleted 60 days after that access period ends. We email the couple twice before it happens.
- The couple can export their wedding data at any time, including during those 60 days.
- If a couple asks us to delete their wedding, it is deleted within 14 days.
- Billing records are kept for the statutory retention period required by tax law.
- Backups roll off on their own schedule; they are not a way to extend or shorten the periods above.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct it if it is inaccurate (rectification)
- Ask us to erase it
- Restrict certain processing
- Object to certain processing
- Receive your data in a portable format
- Withdraw consent, where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise any of these, email privacy@wedvero.com.
If you are a guest and your request concerns wedding content, such as a reply to an invitation, we may route it to the couple, since they control that data and can act on it directly.
Security
We take practical, concrete steps to protect your data:
- Encryption in transit for all traffic to and from Wedvero
- Encrypted storage at rest for the database
- Role-based access, enforced on the server, not just hidden in the interface
- Audit records of sensitive actions, such as permission changes and data exports
- Least-privilege access for Wedvero staff: only what someone needs to do their job
Wedvero does not hold, and does not claim, an ISO 27001 or SOC 2 certification.
Children
Wedvero accounts are for adults. The service is not intended for anyone under 16 to create an account or sign in.
Guests can include children. Details about them, such as name, meal choice or dietary needs, are supplied by the couple for catering and seating, not collected directly from the child.
Changes to this policy
If this policy changes in a meaningful way, we will post the update on this page and adjust the date below. This version takes effect [Effective date].
Contact
- Company
- ZZP Daniel Orosz · OROS Agency
- Chamber of Commerce number (KVK)
- 98242482
- VAT number
- NL005319090B91
- Address
- Kievitstraat 25, Kerkrade, Netherlands
- Data protection contact
- privacy@wedvero.com
- info@oros.agency