Privacy policy

The data controller (responsable del tratamiento) for your data is Global Mistral Solutions SL. You can write to us at info@wedilio.com about anything to do with your data.

If you create an account: your name, your email address and, if you use one, your password (always stored encrypted) or the identifier of your Google account. We use them to give you access, provide the service to you and let you know what is happening with your wedding. Legal basis: the performance of the contract.

If you buy a plan: payment is handled by Stripe, which acts as the seller of the plan to you (merchant of record): it receives your payment and billing details and processes them as a controller in its own right, under its privacy policy. We neither see nor store your card details; we only know which plan you have and until when.

Security: with every change to your account we store the IP address and the browser it was made from, so that we can investigate unauthorised access or abuse. They are kept with the account’s activity log and deleted with it.

If you use a discount code: we store which code was applied when the website was created and when you paid, and what was paid with it. It is used to apply your discount and to know how many couples come to us through each professional. If a professional gave you the code, we may tell them that it was used and with which plan, so that we can pay them what was agreed; never your names or how to contact you. Legal basis: the performance of the contract, and our legitimate interest in knowing where couples come to us from.

If you order the printed book: the name of the person receiving it, the delivery address, a phone number and an email address, and the book as you ordered it (which photos and messages it contains). They are used to print it, send it and let you know it has been sent, and they are kept with your wedding; the payment details are kept by Stripe. Legal basis: the performance of the contract. If you were included in the messages we send after the wedding, we also keep the discount code we created for you and whether it was used.

If you give us permission: your email address, to send you tips and news. It is optional, it has its own separate box, and you can withdraw it whenever you like without losing the service.

If you are a business and write to us from «Para profesionales» or «Para wedding planners» (our pages for businesses, in Spanish): the name of the business and of the contact person, the email address and, if you give them, the phone number, what you are interested in, how many weddings you organise a year and whatever you tell us. We use them only to reply to you and, if you ask, to prepare a discount code for your couples. Legal basis: dealing with your request before any agreement. If we work together, we keep the name of the business and a contact email address alongside your codes, to manage them and tell you how many couples use them. We keep them for as long as the conversation lasts and, if we work together, for as long as the collaboration lasts.

If you accept analytics cookies: we use Google Analytics, through Google Tag Manager, to measure which Wedilio pages are visited and how the product is used. It collects a random identifier for the browser, the pages viewed, steps such as creating the website, publishing it or choosing a plan, and technical data about the device; never your name, your email address or anything about your wedding or your guests. It only runs on Wedilio’s pages and your panel: never on wedding websites or on what your guests see. Legal basis: your consent, which you can withdraw whenever you like from «Cookie settings». More detail in the cookie policy.

If you accept advertising cookies: we use Google Ads, also through Google Tag Manager, to find out which Wedilio ads bring the couples who create their website or choose a plan, and to be able to show our ads to people who have visited us before. Google receives a random identifier, the click on the ad, and the fact that an account has been created or a plan paid for, with its amount; never your name, your email address or anything about your wedding. The same pages as analytics, never wedding websites. Legal basis: your consent, which is given and withdrawn separately from consent to analytics, from «Cookie settings».

When you upload your guest list, you decide what data is processed and what for: you are the controllers of that data, and we act as processors (encargados del tratamiento) on your behalf. We ask you to let your guests know that you use Wedilio to organise the wedding.

Guests don’t need to create an account. They get in through a personal link and only see your wedding’s information.

If your website is in two languages, we store each guest’s language (the one you choose for them in the list, or the one they answer in), so that their link opens in it. You write your texts in each language yourselves: they are not sent to any translation service.

The RSVP form asks about allergies or diets unless you hide that question, and the answers may include information about a person’s health. The General Data Protection Regulation treats it as a special category of data (Article 9), so we handle it with more care than the rest:

• It is only collected while that question is shown (you can hide it in the editor), and the guest decides whether to answer it.
• It is used only so that you can organise the catering. We don’t analyse it or use it for anything else.
• It does not appear on the wedding’s public website or in any internal activity log: our logs keep only identifiers, never the content of the answers.
• It is deleted with the rest of the wedding’s data.

If a guest would rather not write it here, they can tell you directly.

The photos guests upload are reduced in size on the phone or computer itself before they are sent, and in that process the metadata is removed, including the GPS location that many cameras add automatically. We keep only the reduced version: we do not keep the original file.

Your account’s data, for as long as you have the account. Each wedding’s data (the website, the guest list, the guests’ answers and the photos), for as long as you have a plan and one year more; on the free plan, for one year from when you created the website. We never delete it before 15 days have passed since the wedding, and we email you 30 and 7 days beforehand. Weddings created without an account ever being registered are deleted after 180 days without activity.

If you delete the account, we permanently delete your data and your wedding’s data, including the photos and the guests’ answers.

Every night we also make an encrypted backup of the database and the photos, only so that we can recover them if something goes wrong. What you delete also disappears from those backups within 14 days.

We keep only what the law obliges us to keep, such as invoices.

Only with those we need for the service to work, and always as processors on our behalf:

• Vercel (website hosting). The functions that process your data run in Paris.
• Amazon Web Services (the database, and the server that makes the backups), in Paris.
• Cloudflare (album photos and encrypted backups), on servers in the European Union.
• Webempresa (sending emails), a Spanish company with servers in the European Union.
• Gelato (Gelato AS, Norway, in the European Economic Area), only if you order the printed book: it receives the book and the delivery details (name, address, phone number and email address) to print it at one of its printers in the European Union and deliver it.
• Google, only if you sign in with your Google account, accept the analytics or advertising cookies, or search for the wedding venue in the editor: what you type in «Venue» or «Address» is looked up on Google Maps by our server, without your IP address.

Vercel, Amazon, Cloudflare and Google are US companies. If any of them had to access data from there, the transfer is covered by the EU-US Data Privacy Framework and by standard contractual clauses. Stripe processes payment data as a controller in its own right (see above). We don’t sell your data to anyone, and we don’t use it for third-party advertising. The fonts on wedding websites are served from our own servers: opening a wedding website does not send your guests’ IP address to anyone else. The only exception is each guest’s own decision: the venue map is a drawing of ours until someone taps «See the map» or «Directions»; then their browser loads Google Maps, which receives their IP address and may use its own cookies.

You can ask us to give you access to your data, to correct it or delete it, to restrict or object to its processing, and to take it to another service. From your account’s settings you can download all your data in a file and delete the account without asking our permission.

If you believe we have not handled your data properly, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD, Spain’s data protection authority, aepd.es).