Privacy Policy
Last Updated: January 19, 2026
Introduction
Welcome to Vow & How ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding planning application and services.
By using Vow & How, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Personal Information You Provide
When you create an account and use our services, we collect:
- Account Information: Name, email address, phone number
- Authentication Data: Login credentials (managed securely through Clerk)
- Wedding Details: Wedding date, venue information, couple names
- Guest Information: Names, email addresses, phone numbers, RSVP responses, dietary restrictions, meal preferences
- Vendor Information: Vendor names, contact details, categories, notes, budget information
- Event Details: Timeline events, tasks, checklists, registry items
- Photos: Guest-uploaded photos and images you upload for your wedding website
- Payment Information: Subscription plan details (payment processing handled by third-party providers)
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the platform
- Device Information: Browser type, operating system, IP address
- Cookies and Similar Technologies: We use cookies to maintain your session and improve user experience
Information from Third Parties
- Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture
- Spotify: If you connect Spotify for playlist features, we access your public profile and playlist data
How We Use Your Information
We use the collected information for:
- Service Delivery: Providing and maintaining our wedding planning platform
- Account Management: Creating and managing your account
- Guest Website: Generating and hosting your personalized wedding website
- Communication: Sending service-related notifications, updates, and support responses
- Features: Enabling RSVP tracking, guest management, vendor coordination, timeline planning, photo sharing
- Analytics: Understanding how users interact with our platform to improve services
- Security: Detecting and preventing fraud, abuse, and security incidents
- Legal Compliance: Complying with legal obligations and enforcing our terms
Data Storage and Security
Where We Store Your Data
- Database: PostgreSQL - hosted in secure cloud infrastructure
- Authentication: Clerk - industry-standard authentication service
- File Storage: AWS S3 - for photos and media files
Security Measures
We implement industry-standard security measures including:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest for sensitive data
- Role-based access control (RLS) in our database
- Regular security audits and updates
- Secure authentication through Clerk
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Data Sharing and Disclosure
We do not sell your personal information. We may share your data in the following circumstances:
With Your Consent
- Guest Website: Information you choose to display on your public wedding website (guest names, event details, photos)
- Guests: RSVP information and event details shared with your wedding guests
Service Providers
We share data with trusted third-party service providers who assist us:
- Clerk: Authentication and user management
- Supabase: Database hosting and management
- AWS: File storage and serverless functions
- Payment Processors: Subscription billing (we do not store credit card details)
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
Legal Requirements
We may disclose your information if required by law, court order, or governmental request, or to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or security issues
- Enforce our Terms of Service
Your Rights and Choices
Access and Control
You have the right to:
- Access: View all personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Export: Download your data in a portable format
- Opt-Out: Unsubscribe from marketing communications
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected] or use the settings within your account.
Data Retention
- Active Accounts: We retain your data while your account is active
- After Account Deletion: We delete your data within 30 days, except where required by law
- Guest Photos: Photos are stored for the duration specified in your subscription plan (30-90 days post-wedding)
- Backups: Data in backups may persist for up to 90 days after deletion
Children's Privacy
Vow & How is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain your login session
- Remember your preferences
- Analyze usage patterns
- Improve platform performance
You can control cookies through your browser settings, but disabling cookies may affect platform functionality.
Third-Party Links
Our platform may contain links to third-party websites (e.g., vendor websites, registry links). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "Last Updated" date
- Sending an email notification for material changes
Your continued use of Vow & How after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Website: https://vowandhow.com
Compliance
We are committed to complying with applicable data protection laws, including:
- General Data Protection Regulation (GDPR) for EU users
- California Consumer Privacy Act (CCPA) for California residents
- Other applicable regional privacy laws
For EU Users (GDPR)
If you are in the European Union, you have additional rights under GDPR:
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
For California Residents (CCPA)
California residents have the right to:
- Know what personal information is collected
- Know whether personal information is sold or disclosed
- Opt-out of the sale of personal information (we do not sell data)
- Request deletion of personal information
- Non-discrimination for exercising CCPA rights
By using Vow & How, you acknowledge that you have read and understood this Privacy Policy.