Privacy Policy

The Short Version

• We keep what you put into your plan, and use it only to run Venamori for you.
• We do not sell it, rent it, or share it with advertisers. There are no ads, and no analytics or tracking anywhere in Venamori.
• Guests see only what you publish on your website and registry. Home addresses, phone numbers and email addresses are never published.
• You can delete your account, and everything it owns, from Settings at any time. It is gone straight away.

Who We Are

Venamori is a wedding planner on the web and on iPhone and iPad. In this policy, “we” means whoever runs Venamori, and “you” means anybody who uses it, including guests who visit a wedding website.

The address for questions and privacy requests is published here before Venamori opens to everyone. Until then, everything you can ask for on this page (seeing your information, correcting it, downloading it and deleting it) you can do yourself in Settings, signed in.

What We Keep, and Why

Your account

Your email address and your password. The password is kept only as a one-way hash by our sign-in provider, so nobody at Venamori can read it. If you turn on two-step verification, the key your authenticator app shares with us is kept too.

The language you choose for Venamori, kept with your account so every device you sign in on follows it. Before you sign in, your browser or your phone keeps it instead, as the Cookie Policy describes.

Your plan

Everything you enter: your names, date and venue; your budget, invoices and the files you attach to them; your guest list, with households, home addresses, phone numbers, the email addresses you add and replies; seating, checklist, schedule, wedding party, registry, website and photos. We keep it to show it to you and to the people you invite, and for nothing else. A guest's email address is also used to link a gift they reserve to their household. Venamori sends nothing to it.

The language your wedding website speaks to your guests, kept with the website. No one outside Venamori is involved in showing Venamori in your language.

Your wedding email

The address the two of you choose for your wedding, and what you write in Mail: drafts, the files you attach to them, your folders, and the people you address. Only the two of you can open Mail; the people you invite to plan and your wedding party cannot. When you check whether an address is free, the time of the check is kept for a day, to limit how many checks anyone can make. Mail does not send or receive email yet. Before it does, this page will name the company that carries it and say what is kept of the mail you receive.

People you invite to plan

The name and email address you give for them, so the invitation reaches the right person, and the access you chose. Once they join, they have an account of their own, kept as above.

Your wedding party

The details the couple enters for each member: name, role, and if given an email address and phone number. A member who opens their own page has an account. A member who turns on reminder texts has the time they said yes recorded, and a member who allows notifications in the app has an address for their device, so reminders can reach it.

Guests visiting a wedding website

Nothing, unless they reply or reserve a gift. A reply on the website keeps, in the couple's guest list, each person's yes or no, any note for the kitchen, the name of a guest they bring, their email address if they give one, and when they replied. A reservation keeps the name, the email address if they give one, and any note, and shows them to the couple. Either way the guest's browser keeps a key, so they can change it later from the same browser. When a guest follows a link from a registry to a shop, we record which gift, which shop, and which site they came from, to show the couple how their registry is used. Where it is switched on, a code that changes every day and cannot be turned back into an address lets those visits be counted without identifying anyone.

Contacts and photos on your phone

Adding guests from your contacts saves only the people you pick, with their names, home address and phone number, never their email addresses. Your address book is never uploaded. Photos for your website are redrawn on your device before they leave it, which removes the location and other details a camera stores inside a photo.

A record of access

A log of who was given access to a wedding, who was invited, when the website was published, and when mail was sent from it, kept so that anything that goes wrong with a plan can be looked into. The app does not show this log.

Technical records

Like every website, the computers that serve Venamori record technical details of each visit, such as the IP address and the kind of browser, for a short time, to keep the service running and to protect it.

Who Sees It

• You, and the people you invite to plan, with the access you give each of them.
• Members of your wedding party, who see only the parts you share with them.
• Guests, who see only what you publish on your website and registry.
• The companies below, which run parts of Venamori for us and handle your information only to do that.
• Anyone the law requires us to give it to, and only what the law requires.

Nobody else.

Companies That Run Parts of Venamori

Some are used only when the feature that needs them is in use, or switched on.

• Supabase keeps the database, the accounts and the files, on servers in the United States (Oregon).
• Our web host runs the website and the server that answers it.
• Have I Been Pwned checks a new password against known data breaches. It receives only the first five characters of a one-way hash of the password, which reveals nothing about it.
• Anthropic reads an invoice when you ask Venamori to fill in its details for you. The file and the names of your budget categories are sent for that one reading.
• Twilio sends reminder texts to wedding party members who have said yes to them: the phone number and the reminder.
• Expo delivers notifications to the phones of wedding party members who allow them: the device address and the reminder.
• Cloudflare may check that a person, and not software, is signing in, when that check is switched on.

Cookies

Venamori uses only the cookies it needs to keep you signed in, and none for advertising or tracking. Guests visiting a wedding website get none at all. The Cookie Policy lists each one.

How Long We Keep It

As long as your account exists. Starting over deletes a wedding, and deleting your account deletes it and every wedding it owns. Both happen straight away, files included. Copies inside our database provider’s backups are removed when those backups expire on its schedule.

Mail you delete waits in Recently Deleted for 30 days, then is erased with its files; Empty Now erases it at once. When a wedding is deleted, a one-way hash of its email address is kept, with the accounts that held it, so the address is never given to anybody else and you can have it back if you start over.

A gift reservation stays with the couple’s wedding until they delete it. Technical records are kept only for as long as running and protecting the service needs.

Your Choices and Rights

• See and correct everything in your plan, any time, in the app.
• Download a copy of your plan from Settings on the web.
• Delete your account and everything it owns from Settings, on the web or on your phone.
• Turn reminder texts off on your wedding party page, or reply STOP to any text.
• Turn notifications off in your phone’s settings.

Depending on where you live (in the European Union, the United Kingdom or California, for example), the law also gives you the right to ask what we hold about you, to have it corrected or deleted, to object to how it is used, to take a copy with you, and to complain to your data protection authority. We do not sell or share personal information as California law defines those words. To use any of these rights, see the contact details above.

Children

Venamori is for adults planning a wedding, and accounts are not for anyone under 16. Couples sometimes add children to a guest list; that is part of the couple’s plan and is handled like the rest of it.

Keeping It Safe

• Every connection to Venamori is encrypted, and browsers are told never to connect without it.
• Our database provider encrypts what it stores.
• Passwords and invitation links are kept only as one-way hashes.
• The rules for who can see what are enforced by the database itself, so a mistake on a screen cannot show one wedding’s plan to another.
• You can add two-step verification, and sign out every other device, from Settings.

No system is perfectly secure. If something goes wrong that affects your information, we will tell you.

Changes to This Policy

When this policy changes, the date at the top changes with it. If a change affects what we do with your information, we will say so in the app before it takes effect.