Privacy Policy

1. Who Controls Your Data

myeverlove (operating under Greek law) is the data controller for personal data collected through myeverlove.com. Contact us at [email protected] for any data-related requests.

2. What Data We Collect

From couples:

• Names, email address, wedding date
• Profile photo and welcome video (optional)
• Wedding story and page customizations
• Gift registry details

From guests:

• Name and email (when contributing or RSVPing)
• RSVP details (attendance, meal preference, dietary restrictions)
• Contribution amounts and messages

From vendors:

• Business name, email, phone, location
• Business description, photos, availability

Automatically collected:

• Usage data via Google Analytics (anonymized)
• Browser type and device information
• Pages visited and time spent (anonymized)

3. How We Use Your Data

• To provide and operate the myeverlove platform
• To process payments through Stripe
• To send transactional emails (RSVP confirmations, contribution receipts, invitations)
• To display wedding pages to invited guests
• To connect couples with vendors
• To improve our platform through anonymized analytics

We do not use your data for advertising, sell it to third parties, or use it for any purpose other than providing our service.

4. Legal Basis (GDPR)

We process your data under the following legal bases:

• Contract performance — to provide the services you requested
• Legitimate interests — to improve our platform and prevent fraud
• Consent — for analytics cookies (you can withdraw at any time)

5. Data Sharing

We share your data only with:

• Supabase — our database provider (EU servers)
• Stripe — for payment processing
• Resend — for email delivery
• Cloudflare — for hosting and file storage
• Google Analytics — anonymized usage data only

All providers are GDPR-compliant. We do not share your data with any other third parties.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all your personal data is permanently deleted from our systems within 30 days, except where retention is required by law (e.g., financial records for 5 years).

7. Your Rights (GDPR)

As an EU resident, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — delete your account and all data
• Portability — receive your data in a machine-readable format
• Object — object to certain types of processing
• Withdraw consent — for cookie/analytics consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr

8. Cookies

We use the following cookies:

• Essential cookies — required for login and basic functionality (cannot be disabled)
• Analytics cookies — Google Analytics to understand how visitors use our site (requires your consent)

You can manage your cookie preferences through our cookie banner or by adjusting your browser settings.

9. Security

We protect your data using industry-standard security measures including HTTPS encryption, bcrypt password hashing, and AES-256 encryption at rest through our infrastructure provider Supabase.

10. Children's Privacy

myeverlove is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email. The date at the top of this page reflects the most recent update.

Questions about your privacy? Contact us at [email protected]