Privacy Policy

What data we collect

• Account: name, email, language and password, which we keep only as a hash. If you sign in with Google or Apple, we receive the name and email of that account.
• Invitation: the couple's names, date, place, story, photos, music, colors and the other text you write.
• Guest list: name, number of seats, group, RSVP and, if you enter it, each guest's email.
• Guests: RSVPs, messages, photos sent through the big day camera and, for gifts, name, message and amount. A guest can choose to appear as anonymous.
• Payments: Stripe processes cards and Pix. We do not store card numbers or bank details. We keep the amount, the status and what the guest chose to show the couple. A receipt email, if given, goes only to Stripe.
• Security and use: a code made from the IP address (not the address itself), used to limit abuse in messages and gifts; a log of the emails we send (recipient, subject and status); and the device code, if you turn on notifications.
• Photos with a location: when a photo carries the place where it was taken, we ask OpenStreetMap for the name of the place.

What we use it for

• Providing the service: building and publishing the invitation, receiving RSVPs, messages, photos and gifts.
• Sending service emails: email confirmation, password reset, notices of answers, gifts and messages, and reminders about your invitation.
• Keeping the service secure and preventing fraud and abuse.
• Meeting legal and accounting duties.
• Sending news and tips by email, only if you turn that option on in settings.

Legal bases

We process data to perform our contract with you (the service), for legitimate interest (security and reminders about what you already started), to meet legal duties and, when you turn them on, with your consent (news by email and notifications). You can withdraw consent at any time.

Who we share it with

We do not sell personal data. The people a couple invites see the invitation, and the couple sees the answers, messages, photos and gifts from guests. Beyond that, we share what is needed with the companies that are part of the service:

• Stripe, for payments and the couple's payout account.
• Resend, for sending email.
• Cloudflare, for the network, protection and file storage.
• Google and Apple, for sign in, when you choose them.
• OpenStreetMap and Apple, for place and music lookups, with no data from your account.
• The company that hosts our servers.

Transfers to other countries

Some of these providers are outside Brazil. In those cases the transfer follows the LGPD and, for people in the EU or UK, the GDPR, with the safeguards the law requires. We may also give data to authorities when the law requires it.

What shows in the public invitation

The invitation is opened by people who have the address (and the password, if the couple sets one). The invitation's names, photos and text are visible to them. The guest list, guests' emails and answers do not show in the invitation.

How long we keep it

• Account and invitation: as long as the account exists. When you delete the account, we remove the invitation, photos, guest list and messages.
• Log of emails sent: 90 days.
• Payments already made: kept without personal data, for the period required for accounting and legal reasons.

Cookies

We use cookies that are necessary to keep you signed in, and we keep in your browser only what the session and the big day camera need to work. We do not use advertising cookies or third party tracking tools.

Your rights

You can ask us to confirm that we process your data and give you access to it; correct incomplete or wrong data; anonymize, block or delete data that is not needed; give you a portable copy; tell you who we share it with; and stop processing based on your consent. If you are in the EU or UK, you can also object to processing and ask us to restrict it.

You can delete your account and turn off emails and notices in Settings. For anything else, write to hello@evertied.com. We answer within 15 days.

If you think we did not handle a request well, you can complain to the Brazilian data protection authority (ANPD) or, in the EU or UK, to your local authority.

Children and teenagers

The service is not aimed at people under 18 and we do not collect their data on purpose. Names and photos of children that a couple publishes are the couple's responsibility.

Security

We store passwords with a strong hash, use HTTPS and limit who can reach the data. No system is completely secure. If an incident affects your data, we tell you and the authority, as the law requires.

Changes to this policy

If we change this policy in a significant way, we tell you by email or inside the service. The date at the top shows the last update.