Privacy policy

• Your account: name, email, and your event details (date, venue, budget…).
• Your guests: the names, phone numbers, emails, dietary restrictions and notes that YOU upload to organise your event. We handle this data only on your instructions and only for your event: sending your invitations, recording RSVPs and seating your tables. We never use it for advertising or share it for other purposes.
• Payment: handled by Stripe; we never see or store your card.
• Usage: cookies and analytics, subject to your consent (see Cookies).

• Running the service (your account, your events, the RSVPs) and billing you: necessary to perform our contract with you.
• Your guests’ data: handled on your instructions. You decide what is asked of them and why; we provide the tool.
• Tips and product emails: only if you opted in, and every email carries its unsubscribe link.
• Security and backups: our legitimate interest in keeping the service up and your data intact.

We do not sell personal data, and your guests’ data never enters our marketing lists. We also make no automated decisions that produce legal effects on you.

With the providers we need in order to operate. Each one handles the data only on our instructions, under a data processing agreement:

• Supabase — database and sessions (United States)
• Vercel — application hosting (United States)
• Stripe — payments (we never see your card) (United States)
• Brevo — email delivery (European Union)
• Cloudflare R2 — encrypted backups (United States)
• OpenRouter — help chatbot (United States)
• Capibot — WhatsApp messages (Mexican numbers only) (Mexico)

If we change providers we will say so here. We would also share data if a competent authority legally required it.

Our servers are in the United States, because nearly every wedding organised on uedii takes place in Mexico and they respond faster from there. If you are in Europe, the UK, Canada or Brazil, that means your data leaves your country.

That transfer is covered by the agreements we have signed with each provider, which include the Standard Contractual Clauses approved by the European Commission and require them to protect your data to the same standard as in your own country.

• Your account and events: for as long as the account is active.
• Your guests’ data: automatically anonymised 6 monthsafter the wedding date. After that the counts remain (how many attended), but nobody’s name, phone number or email does.
• If you close your account or it goes unpaid: the schedule in the Terms of use applies — read-only and, after 90 days with prior warnings, permanent deletion.
• Invoices and tax records: 5 years, as Mexican law requires.
• Encrypted backups: overwritten within 90 days at most.

You can request access to your data, correct it, have it erased, take it with you in a file, object to a specific use, or withdraw your consent. None of this costs anything or counts against you.

The two that matter most are inside the platform, no permission needed: under My account you can download all your data and delete your account permanently. For anything else, write to privacidad@uedii.com from your account’s email address.

If you are a guest at a wedding and you do not want your data used: the couple uploaded it, so you can ask them directly — or write to us and we will sort it out with them.

Write to us first at privacidad@uedii.com— almost everything gets resolved there. But you have the right to go straight to your country’s data protection authority without going through us: your national or state authority if you are in Europe, the ICO in the UK, the OPC in Canada, the ANPD in Brazil, or INAI in Mexico.

If we change anything meaningful we will let you know by email. The date above always indicates the version in force.