Privacy Policy

1. Who we are

Revolt Wedding (“we”, “us”) provides a wedding planning platform for couples and wedding planners. This policy explains what personal data we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Israeli Protection of Privacy Law (5741-1981). For any privacy question, write to us via the contact page.

2. Data we collect

• Account data — name, email address, phone number, password (stored hashed by our authentication provider), and profile photo if you add one.
• Wedding data — what you enter to plan your event: names, date, venue, budget, tasks, vendors, seating, invitation designs, invitation card, photos and files (quotes).
• Guest data — the names, phone numbers and language of the guests you add, and their answers (attendance, party size, messages). You must be entitled to share these details with us and, for WhatsApp sending, have your guests' agreement.
• WhatsApp messages — the content of invitations, reminders and messages sent, guests' replies, and delivery statuses (sent, read…).
• Technical data — logs, session and language cookies, and security events needed to operate and secure the service.

3. Why we process it

• Contract — providing the planning workspace, mini-site, card and sending you asked for.
• Legitimate interest — securing the platform, preventing abuse, improving features.
• Consent — optional communications; you can withdraw it at any time.
• Legal obligation — accounting and compliance records where required by law.

4. Who we share it with

We never sell your data. It is processed by our providers, bound by data processing agreements:

• Supabase — database, authentication and file storage, hosted in Frankfurt, in the European Union.
• Meta (WhatsApp Business Platform) — sending invitations and receiving replies: the guest's number and the message content go through Meta, which may process them outside the European Union.
• Resend — sending emails (account confirmation, password reset, contact messages).
• The payment provider — once online payment opens, the payment of your package; we never see your card number.

5. What your guests see

The mini-site and the personal reply link are visible to anyone who has their address. A guest can reply “STOP” at any time: their number is then never contacted by the platform again.

6. Retention

Your data is kept while your account is active. The mini-site is taken offline 30 days after the wedding. When you delete your account, deletion takes place after a cancellation period; wedding and guest data is then deleted or anonymized, except where the law requires longer retention.

7. Your rights

You may request access, rectification, erasure, restriction or portability of your data, or object to its processing, at any time via the contact page. You may also contact a supervisory authority: in Israel, the Privacy Protection Authority; in the European Union, the authority of your country.

8. Security

Data is encrypted in transit and at rest, access is scoped by row-level security policies, and authentication tokens are stored in HTTP-only cookies.

9. Cookies

We only use necessary cookies: your login session and your language choice (kept for one year). No advertising cookies.

10. Changes

We will post any change to this policy on this page with its date. Material changes will be announced in the application.