Privacy Policy

Introduction

Welcome to WeddingReimagined, operated by Open Horizon Digital SRL ("we," "us," or "our"). We respect your privacy and are committed to protecting the personal data of the couples, planners, and guests who interact with our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our wedding planning application.

1. Information We Collect

We collect information to help you plan the perfect event. This generally falls into two categories:

Account & Event Data: Contact details, wedding dates, and logistical preferences you provide when creating a workspace.

Guest Data: Names, dietary requirements, and RSVP statuses of your guests. Note: As an organizer, you are the "Data Controller" for your guest list; we act as the "Data Processor" providing the tools to manage it.

Usage & Device Data: When you visit our website, we automatically collect certain information about your device, including your IP address, browser type, and operating system. If you explicitly consent via our cookie banner, we use Google Analytics 4 to track your interactions with our platform (e.g., pages visited, features utilized) to help us maintain system reliability and improve our user experience.

Tracking Technologies & Storage: We use local storage (localStorage) to remember your privacy preferences (wedding_cookie_consent). If you consent to tracking, Google Analytics will drop cookies in your browser to distinguish you as a unique visitor across your session.

2. How We Use Data

Open Horizon Digital SRL processes information to deliver our core services:

Service Delivery: Generating seating plans, routing RSVP alerts, and tracking expenses.

Intelligence: Improving our automated seating algorithms and compatibility scores.

Security: Monitoring for fraudulent activity and ensuring platform integrity.

We never sell personal data. We only share data with third-party integrations (such as Canva or calendar providers) if you explicitly authorize those connections.

3. Cookies and Third-Party Processors

We do not sell or trade your personal data. To provide our services and track website performance, we share specific data with third-party sub-processors who act strictly under our instructions:

Google Analytics 4 (Google Ireland Limited): We use GA4 to analyze web traffic. GA4 processes your anonymized IP address and usage patterns. We have configured our integration to be highly privacy-protective: we have disabled data-sharing settings for Google's internal benchmarking, disabled form-interaction scraping to prevent accidental PII leakage, and disabled history-based tracking overrides to preserve your privacy choices.

Data Transfers Outside the EEA: Google Analytics may transmit and store data on servers located in the United States. Google complies with the EU-U.S. Data Privacy Framework to ensure your data receives an equivalent level of protection as it does within the EU.

PostHog (PostHog, Inc.): We use PostHog for product analytics and session recordings to understand how organizers interact with our platform (e.g., using the drag-and-drop canvas or generating a seating plan) so we can identify bugs and improve the user experience. PostHog processes usage data, navigation paths, and interactions. Privacy Protection & Data Residency: PostHog tracking is strictly disabled until you explicitly consent via our cookie banner. To ensure robust GDPR compliance, we utilize PostHog's EU Cloud infrastructure; all product analytics data is hosted and managed on servers located in Frankfurt, Germany, ensuring this data remains within the European Economic Area (EEA).

Signup source (first party): If you have accepted analytics cookies and then create an account, we record where your visit started: the first page you opened on our site, the name of the website that sent you (for example google.com, never the full address), any campaign tags in the link, and which of our own links you followed (for example the credit at the bottom of an invitation). Links that work as a private code, such as invitation links, are never stored. We keep this on your account record only, on the basis of your consent, use it to count which channels bring new organizers, and never share it with third parties. If you choose essential cookies only, nothing is recorded and anything noted during your visit is discarded. It is deleted together with your account.

4. Google User Data

We use Google services in two separate ways. This section sets out each of them, what Google data is involved, and what we do with it.

Sign in with Google: If you choose to sign in with Google, we request only the openid, email and profile scopes. From these we receive your email address, your first and last name, and, where Google supplies it, the gender field on your Google profile. We do not request or receive access to Gmail, Drive, Contacts, Calendar, Photos or any other Google service.

How we use it: Your email address identifies your account and is where we send RSVP alerts and account notices. Your name pre-fills your planner profile. The gender field, where present, only selects the default illustrated avatar shown in the app. We do not use Google user data for advertising, and we do not use it to train machine learning models.

How we store it: These fields are stored on your account record in our database, encrypted in transit and in our backups, and kept for as long as your workspace is active. We do not retain Google access tokens or refresh tokens once a sign-in has completed.

What we share: We never sell, rent or trade Google user data, and we never transfer it to third parties for advertising. It is shared only with the sub-processors listed in the previous section, and only in order to run the service you asked for.

Search Console (our data, not yours): The same Google Cloud project holds an internal tool that reads Google Search Console statistics for weddingreimagined.com using the webmasters scopes. That grant is made by us, over our own website, and it exposes no personal data belonging to you or to your guests.

Withdrawing access: You can disconnect WeddingReimagined from your Google account at any time at myaccount.google.com/permissions. You can also ask us to delete the account itself, using the contact details at the end of this policy.

5. Retention & Security

Retention: Event records remain available for the lifetime of an active workspace. Upon cancellation or extended inactivity, we schedule data for removal within 90 days.

Security: We employ industry-standard encryption for backups and data in transit. Access to production data is restricted to trained personnel strictly on a need-to-know basis.

6. International Data Transfers

Your information, including personal data, may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we may transfer the data, including Personal Data, to the United States (or cloud regions hosting our seating solvers) and process it there. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

7. Your Data Protection Rights (GDPR)

We are committed to ensuring you are fully aware of all of your data protection rights. As a user in the European Union, you are entitled to the following:

The right to access You have the right to request copies of your personal data.

The right to rectification You have the right to request that we correct any information you believe is inaccurate.

The right to erasure You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us at the email provided below.

Managing Your Consent

Your privacy choices are strictly binary and opt-in by default. No analytics tracking occurs until you explicitly click "Accept All" on our consent banner.

You have the right to withdraw your consent at any time, as easily as you gave it. You can completely reset your preferences, clear our tracking cookies, and bring back the consent banner by clicking the "Cookie Settings" link in our website footer, or by clicking the button below:

8. Children's Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information directly from children under 16.

Note for Organizers: If you use our seating plan features to arrange seating for minors (e.g., assigning high chairs), you confirm that you have the necessary consent (usually from the minor's parent or guardian) to input this data into our system. We process this data solely for the purpose of helping you organize your event.

If you become aware that a child has provided us with Personal Information without parental consent, please contact us.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

By email:

[email protected]