Privacy policy.

The short version

• We collect the minimum we need to run Lovina: account email, the wedding data you put in, and basic usage logs.
• We never sell your data. There are no ad networks on Lovina.
• We do not share your guest list with vendors, ad networks, or third parties — full stop.
• You can export everything and delete your account from /profile at any time.

What we collect

Account. Your email address, the password you choose (hashed with bcrypt), and the name you give yourself. Optional Google Sign-In adds your Google profile name and avatar.

Wedding data. Everything you create in Lovina — guests, budget rows, seating layouts, vendor notes, inspiration uploads, the public wedding website you publish, and the photos guests upload to your gallery.

Usage logs. Standard server logs (IP address, browser type, pages visited, timestamps) for security and debugging. Retained 30 days.

Payments. If you purchase Premium or Planner, payment processing is handled by Stripe. We store your Stripe customer ID and plan status; we never see or store your card number.

How we use it

To run your account and provide the product. To send transactional email (invitation, RSVP, payment receipts) from [email protected]. To send The Atelier Letter newsletter only if you opt in. To detect abuse. To improve the product based on aggregate, anonymized usage patterns.

Who we share it with

Sub-processors that operate Lovina:

• Stripe — payment processing.
• Resend (or your configured SMTP) — transactional email delivery.
• S3-compatible storage (or local disk, on self-hosted) — file uploads.
• Google — only if you opt in to Sign-In with Google.

That is the entire list. We do not share with ad networks, data brokers, vendor marketplaces, or wedding aggregators.

Your rights

You can export your wedding data as JSON, change your email, change your password, transfer ownership of a wedding to a collaborator, and delete your account — all from /profile. Deletion is permanent and irreversible after a 14-day soft-delete grace window. Under GDPR (EU) and CCPA (California) you have the right to access, correct, port, and delete your data; the controls above implement these rights.

Cookies

Lovina uses a strictly necessary session cookie for authentication and a localStorage entry for your theme preference. We do not use third-party analytics, advertising, or fingerprinting cookies.

Children

Lovina is not directed at, and is not intended for, children under 16. We do not knowingly collect information from anyone under 16. If you believe a child has provided us information, contact [email protected] and we will delete it.

Contact

Privacy questions: [email protected].