Privacy policy.

• Account information — name, email address, password (hashed), account type.
• Wedding planning data — guest names and contact details, RSVP responses, meal choices and allergy notes, seating assignments, budgets, checklists, photos and website content you upload.
• Vendor business data — business name, category, location, pricing, portfolio media, availability.
• Marketplace activity — inquiries, messages, offers, bookings and reviews.
• Technical data — log and session data needed to keep the service secure.

Guest information deserves a special note. Couples enter details about their guests — including dietary and allergy information, which can reveal health details. We process this solely so couples can plan their event (seating, catering counts, RSVP). It is never used for marketing and never sold. Couples are responsible for having their guests' consent to enter this information.

• To provide the planning workspace, wedding websites, RSVP pages and the marketplace.
• To deliver notifications you'd expect — new inquiries, offers, RSVPs, booking confirmations.
• To moderate vendor listings and keep reviews tied to real bookings.
• To group couples with similar plans — by budget range, city and how soon the wedding is — so we can tailor planning tips, prioritise which vendors we recruit next, and (with your consent) show more relevant ads. This is based only on what you tell us about your wedding, never on sensitive characteristics like religion, ethnicity, sexual orientation or health.
• To secure the service, prevent abuse and meet legal obligations.

We do not sell your personal information. With your consent, we use privacy-friendly analytics and advertising-measurement tools to understand how the site is used and how well our ads perform — you can decline these at any time (see "Cookies" below). We never use your wedding planning data or guest information for advertising.

• Private by default: your planning workspace, guest list, budget and messages. Vendors only see what you include in an inquiry.
• Public when you choose: your wedding website and RSVP page only after you press publish; a vendor's profile only after moderation approval.
• Reviews display your first name and last initial only.

Only service providers needed to run the platform — hosting and database infrastructure, email delivery, and payment processing (handled by Stripe; card numbers never touch our servers). If you accept cookies, a limited set of usage data is also shared with our analytics and advertising-measurement providers (Google Analytics, Microsoft Clarity and Meta) so we can improve the service and measure our ads; decline cookies and none of this is shared. Each provider is bound to use the data only to provide their service. We disclose information to authorities only where the law requires it.

• Planning data is kept while your account is active.
• When you delete your account, personal information is deleted or anonymised within 30 days, except records we must keep (e.g., financial records of bookings, kept up to 7 years for tax law).
• Couples can delete individual guests at any time, which removes their RSVP and seating data.

Passwords are hashed, traffic is encrypted in transit (TLS), access to production data is restricted, and sessions are protected. No system is perfectly secure, but we design for the sensitivity of what a wedding involves — names, addresses and health-adjacent details of people who never signed up themselves.

Under PIPEDA you may request access to the personal information we hold about you, ask us to correct it, withdraw consent, or ask for deletion. Write to us via the contact page (choose "Privacy request") and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

Essential cookies (session and security) are always on — the site can't work without them. With your consent, we also use optional analytics cookies (Google Analytics and Microsoft Clarity, to see how the site is used) and an advertising cookie (the Meta Pixel, to measure and improve our ads). These load only after you press "Accept" on our cookie banner and stay off if you press "Decline" — we apply Google Consent Mode and honour your choice in line with Canada's privacy and anti-spam rules. You can withdraw consent at any time by clearing VowNook's cookies in your browser, which brings the banner back. If this policy changes materially, we will notify account holders before the change takes effect.