WeddingBoard Privacy Policy

Account information. When you create an account, our authentication provider (Clerk) collects your name, email address, and sign-in credentials. We receive your name, email address, and a unique account identifier.

Planning content. The records you create in the course of using the Service: client and couple details, wedding details (dates, venues, notes, budgets), vendor directories including your private ratings and notes, guest lists with RSVP, meal, and dietary information, timelines and run-of-show documents, payment and budget records, appointments, questionnaires and their answers, agreements and acknowledgements, gift records, moodboard images, and uploaded documents.

Information about third parties. Much of the planning content concerns people other than you, such as your clients, their guests, and your vendors. You are responsible for having an appropriate basis to store that information; we process it solely on your behalf and on your instructions, as described in Section 4.

Google Calendar data (optional). Only if you connect Google Calendar: OAuth tokens, your Google account email address, and calendar event data as described in Section 5.

Technical and usage information. Like most web services, our infrastructure providers automatically log technical data such as IP address, browser type, device information, pages viewed, and timestamps, used for security, debugging, and capacity planning. We use essential cookies only (session and authentication cookies); we do not use advertising cookies or third-party ad trackers.

We use the information described above to:

• provide, operate, maintain, and secure the Service;
• render your planning content back to you and generate the outputs you request (printed documents, call sheets, share pages, calendar feeds);
• power optional AI drafting features, as described in Section 6;
• respond to your support requests and communicate with you about the Service, including material changes to this policy or the Terms of Service;
• monitor, detect, and prevent fraud, abuse, and security incidents;
• comply with legal obligations.

We do not sell or rent personal information, we do not share it with third parties for their own marketing, and we do not use your planning content for advertising of any kind.

Where the EU or UK General Data Protection Regulation applies, we process personal information on the following bases: performance of a contract (operating the Service you signed up for), legitimate interests (securing and improving the Service, preventing abuse), consent (optional integrations such as Google Calendar, which you may withdraw at any time), and compliance with legal obligations.

For personal information that Planners store about couples, guests, vendors, and other third parties, the Planner acts as the data controller and WeddingBoard acts as a processor or service provider. We process such information solely to provide the Service to the Planner, never for our own purposes. Planners are responsible for ensuring they have the right to store this information and for honoring privacy requests from their own clients; we will assist with deletion or export requests made through a Planner.

Couple-facing share pages expose only the fields the portal is designed to show: the event timeline, accommodation details, the questionnaire, and agreements. Costs, budgets, private notes, vendor ratings, and contact details are never rendered on share pages. Share links are unguessable tokens and can be disabled by the Planner at any time, which takes effect immediately.

If you choose to connect Google Calendar, we request the calendar.events scope (view and edit events on your calendars) and your email address to label the connection. We use this access exclusively to: (a) display your upcoming Google Calendar events inside the WeddingBoard calendar view, and (b) create, update, or delete the appointment events that you yourself create in WeddingBoard, which we tag so we never modify any other event.

We do not persistently store your Google Calendar events; they are fetched at the time you view your calendar and held only in memory for the duration of the request. OAuth access and refresh tokens are encrypted at rest using AES-256-GCM. Disconnecting Google Calendar inside the Service revokes our access with Google and permanently deletes the stored tokens. You may also revoke access at any time via your Google Account security settings, which disables the integration immediately.

WeddingBoard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, never used for advertising, never used to train AI or machine learning models, and never read by humans except with your explicit permission for support, for security purposes, or as required by law.

Certain features generate drafts on request: run-of-show timelines, the morning brief, budget allocations, vendor outreach messages, thank-you notes, and the in-app assistant. When you invoke one of these features, the relevant planning context is transmitted to Anthropic PBC's Claude API to produce a suggestion. Under our arrangement with Anthropic, API inputs and outputs are not used to train Anthropic's models.

AI outputs are suggestions only; nothing is written to your records until you accept it. Google Calendar data is not included in AI processing.

We share information only with the subprocessors required to run the Service, each bound by its own contractual and security obligations:

Beyond subprocessors, we may disclose information: with your direction or consent (for example, the share pages you publish to couples); to comply with law, regulation, legal process, or enforceable governmental request; to protect the rights, property, or safety of WeddingBoard, our users, or the public; or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to previously collected information and we will notify you of any change in ownership.

We retain your information for as long as your account is active. When you delete a record, it is deleted from the production database, along with dependent records (for example, deleting a wedding deletes its timeline, guests, payments, and documents). Uploaded files are removed from storage; cached copies at the CDN edge may persist briefly before expiring. Residual copies in encrypted database backups are purged on a rolling basis, typically within 30 days.

When your account is deleted, all associated planning content, uploads, and integration tokens are deleted on the same schedule. We may retain minimal records where required by law (for example, billing records for tax purposes).

We take security seriously and design for it: all traffic is encrypted in transit with TLS; data is encrypted at rest by our hosting providers; integration tokens are additionally encrypted at the application layer with AES-256-GCM; every database record is scoped to a single Planner account and enforced on every query; share links use unguessable tokens; and administrative access to production systems is limited and logged. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we will notify affected users without undue delay in the event of a breach affecting their personal information, as required by applicable law.

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal information, and to object to certain processing. You can exercise most of these directly: planning content can be edited or deleted in the app, and printed or exported at any time. For anything else, including full account deletion or a machine-readable export, contact us at team@weddingboard.us and we will respond within 30 days.

California residents (CCPA/CPRA). We do not sell or share personal information as those terms are defined in California law, and we have not done so in the preceding 12 months. You have the right to know what personal information we hold about you, to request deletion, to correct inaccuracies, and not to be discriminated against for exercising these rights.

EU and UK residents. You additionally have the right to lodge a complaint with your local supervisory authority. Our Service is hosted in the United States; by using it you acknowledge that your information is transferred to and processed in the United States under appropriate safeguards.

The Service is a professional tool intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy from time to time. If we make material changes, we will notify you in the product or by email before the changes take effect, and we will update the “Last updated” date above. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions, concerns, or requests regarding this policy or your personal information: team@weddingboard.us. A human reads every message.