Privacy
Privacy Policy
Currently available in English only · Last updated 2026-05-10
1. Who we are
Weddmatch (“we”, “us”, “our”) operates the website at weddmatch-platform.vercel.app. We act as the data controller for the personal data processed through this service. For any data-protection question, write to privacy@weddmatch.app.
2. What we collect
We process the following categories of personal data:
- Identification: the names you provide for yourselves and your email address.
- Assessment answers: your responses to our style and personality questionnaire (multiple-choice, scales, free-text answers).
- Generated plan: the personalised wedding plan our AI produces from your answers.
- Payment metadata: if you purchase your full plan, the Stripe checkout session ID and payment confirmation status. We do not see, store or process your card details.
- Technical data: standard server logs (IP address, browser type, request path, timestamp) retained for security and debugging.
- Cookies: a single preference cookie (
NEXT_LOCALE) to remember your language. We do not use advertising or analytics cookies that require consent.
3. Why we process your data — legal basis
- Performance of contract (GDPR Art. 6.1.b): to deliver the personalised wedding plan and matched vendors you requested.
- Consent (Art. 6.1.a): to send you the plan-ready email and any other transactional message tied to your assessment. You can withdraw consent at any time.
- Legitimate interests (Art. 6.1.f): to keep the service secure, prevent abuse, and improve our matching algorithm using aggregated, non-identifying analyses.
4. Who we share data with
We rely on the following processors. They process your data on our instructions and under data-processing agreements:
- Vercel Inc. — hosting & deployment (servers in the EU where possible).
- Neon Inc. — managed PostgreSQL database for storing your account, assessment and plan.
- Anthropic PBC — generative AI provider that receives your anonymised assessment payload to produce the wedding plan. Anthropic does not retain inputs for model training.
- Stripe Payments Europe Ltd. — payment processor for the €28 plan unlock.
- Resend Inc. — transactional email delivery.
When data is transferred outside the European Economic Area, the transfer is covered by Standard Contractual Clauses or equivalent safeguards required under GDPR Chapter V.
5. How long we keep your data
- Assessment answers and generated plans: 24 months after creation, or until you ask us to delete them.
- Account email: until you ask for deletion or account closure.
- Server logs: 90 days.
- Payment records: as required by tax and accounting law (typically 10 years in the EU).
6. Your rights
Under GDPR Articles 15–22 and 77, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Request erasure (“right to be forgotten”).
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting prior processing.
- Lodge a complaint with your national data-protection authority.
To exercise any of these rights, write to privacy@weddmatch.app. We respond within 30 days.
7. Vendor introductions
When you unlock your plan, we may introduce you to wedding vendors that match your profile. These introductions only happen after you actively click to contact a vendor. We never pass your data to vendors without your action. If a vendor closes a contract with you through Weddmatch, we receive a 2% commission on that contract.
8. Security
All traffic is served over HTTPS. Data is encrypted at rest in our database. Access is limited to authorised personnel under confidentiality obligations. We follow industry-standard practices for software dependencies, secret management and incident response.
9. Children
Weddmatch is intended for adults aged 18 or above. We do not knowingly collect data from children.
10. Changes to this policy
If we materially change how we handle your data, we will notify you by email and update this page. Continued use of the service after a change constitutes acceptance of the updated policy.