Privacy Policy
Last updated: June 29, 2026
What we collect
Account data: your name, email, agency name, and password hash when you create a workspace. Workspace data: the room blocks, contract terms, rooming lists, guest names and contact details, payment statuses, and website content that you, your couples, and their guests enter. Technical data: server logs, IP addresses, and basic analytics needed to operate and secure the Service. We do not collect payment card numbers anywhere; guest payments happen on Stripe-hosted pages governed by Stripe's privacy policy.
How we use it
To operate the Service: rendering your workspace, publishing the couple websites you choose to publish, sending the transactional emails you trigger or schedule (booking notifications, payment reminders), and securing the platform. We do not sell personal data, we do not use workspace data for advertising, and we do not train machine-learning models on your client data.
Guest and couple data
Agencies are the controllers of the wedding data they manage; we process it on their behalf under our Data Processing Addendum. If you are a wedding guest or couple and want your data corrected or removed, contact your agency first, or write to us at hello@seraweddings.com and we will coordinate with the agency that manages your wedding.
Who touches the data (subprocessors)
Vercel (hosting), Supabase (database and authentication), Stripe (payments on your agency's own account), and Resend (transactional email). Each processes data only as needed to provide their service to us. We will update this list before adding subprocessors that handle personal data.
Isolation between agencies
Each agency's workspace is isolated with row-level security at the database layer. No agency can read another agency's data. This isolation also applies to any agency affiliated with our owners.
Cookies
We use only the cookies required to keep you signed in (authentication session). No advertising or cross-site tracking cookies.
Retention and deletion
Workspace data is retained while your account is active. After cancellation, you may export your data; we delete workspace data within 90 days of a verified written request, except records we must keep for legal or accounting reasons.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Write to hello@seraweddings.com and we will respond within 30 days. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and to not be discriminated against for exercising them; we do not sell or share personal information as those terms are defined under that law. If you are in the EEA or UK, you may also lodge a complaint with your supervisory authority.
Security
Encryption in transit, encrypted storage at rest with our providers, tenant isolation by row-level security, and access to production limited to the operator. No method is perfectly secure; we will notify affected agencies without undue delay if a breach affects their data.
Changes and contact
We will announce material changes by email or in-app before they take effect. Data controller for our own account and marketing data: Sera Weddings, LLC, a Wyoming limited liability company (United States). For wedding data you manage, your agency is the controller and we act as its processor. Contact: hello@seraweddings.com.