Privacy Policy

The data controller is MyWedHub, Spain. For any privacy question or to exercise your rights, write to support@mywedhub.com.

• Account data — name, email address, password hash (or Google sign-in identifier), language preference.
• Planning content you create — wedding details, tasks, budgets, vendor records, timelines, idea vault entries and uploaded documents or images.
• Guest data you enter — names, contact details, RSVP status, dietary requirements and any custom fields you choose to add about your guests.
• Billing data — subscription plan, billing name and address, invoice history. Card numbers are handled entirely by Stripe and never reach our systems.
• Technical data — IP address, browser and device type, and error or security logs generated when you use the service.

• To provide the service (contract, Art. 6(1)(b)) — creating your account, storing your planning data, sending service emails.
• To take payment (contract and legal obligation, Art. 6(1)(b) and (c)) — processing subscriptions and keeping invoices for the statutory period.
• To keep the service secure and working (legitimate interest, Art. 6(1)(f)) — abuse prevention, error diagnosis, backups.
• Optional analytics and non-essential cookies (consent, Art. 6(1)(a)) — only if you accept them, and you can withdraw at any time.

When you add guests, vendors or collaborators, you decide what information to record about them. For that data you act as the controller and we act as your processor, following your instructions. Please only enter data you have a lawful reason to hold, tell your guests how their data will be used, and use the dietary or accessibility fields sparingly — that information can be sensitive. Our Data Processing Agreement sets out the terms that apply.

We do not sell your data and we do not use it to train AI models. We share it only with the service providers needed to run My Wed Hub — hosting, database, email delivery, payments and AI image generation. Each one is listed, with its purpose and location, on our Subprocessors page. Our AI image-generation subprocessor is used only for the specific in-app image features you choose to use, and never receives, processes, or has access to any data obtained through the Google Calendar integration described below. Where a provider is outside the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses.

You can choose to connect your own Google account so that meetings created in My Wed Hub are added to your Google Calendar with an automatically generated Google Meet link. This is entirely optional, off by default, and based on your consent (Art. 6(1)(a)); you can withdraw it at any time by clicking Disconnect in Account settings.

• What we request — the narrow calendar.events permission plus your basic Google profile email, so we can show you which account is connected. We do not read your existing calendar or any other Google service.
• What we send to Google — only the meeting details you save in My Wed Hub (title, description, date, time, time zone and any attendee emails you add) for meetings you choose to sync.
• What we store — an encrypted Google refresh token, your connected account email, connection status and the identifiers of calendar events we created. Tokens are held encrypted on our servers and are never exposed to your browser.
• Limited use — data obtained through Google APIs is used only to provide this calendar feature. It is never sold, never used for advertising, and never used to train AI models, in line with the Google API Services User Data Policy. No data obtained through the Google Calendar API is shared with, processed by, or used by any AI or machine learning system, including our AI image-generation feature, at any point.
• When you disconnect — we delete the stored credentials immediately. Calendar events and meeting links already created remain in your Google Calendar and in your My Wed Hub records; you can remove them in Google yourself. You may also revoke access directly from your Google account permissions page.

• Account and profile data — For as long as your account is open, then deleted within 30 days of account deletion.
• Wedding workspaces, guest lists, budgets and documents — Until you delete them, or within 30 days of account deletion.
• Billing records and invoices — 6 years, as required by Spanish commercial and tax law.
• Email delivery logs and suppression lists — 24 months, to protect deliverability and honour unsubscribes.
• Security and error logs — 90 days.
• Google Calendar connection credentials — Until you disconnect the integration or delete your account, then deleted immediately.

You can, at any time:

• Access and export your data — Account settings includes a one-click export of everything we hold about you in machine-readable form.
• Correct anything inaccurate, directly in the app or by writing to us.
• Delete your account and its content from Account settings. Deletion is permanent.
• Object or restrict processing based on legitimate interest, and withdraw consent for cookies or optional processing.
• Complain to the Agencia Española de Protección de Datos (AEPD) — https://www.aepd.es. We would rather you came to us first so we can put it right.

We respond to requests within one month. To make one, email support@mywedhub.com.

Data is encrypted in transit and at rest by our infrastructure providers. Access to your workspaces is enforced at the database level, so only you and the collaborators you invite can read your data. Uploaded documents and images are stored in private buckets and served through short-lived signed links. No system is perfect: if a breach affects your data and poses a risk to you, we will notify you and the supervisory authority as required by law.

My Wed Hub is not intended for anyone under 16. We do not knowingly collect data from children.

If we make a material change to this policy we will tell you by email or in the app before it takes effect. The date at the top always reflects the current version.