Effective date: May 20, 2026
Last updated: May 20, 2026
This Privacy Policy applies to LumiWed’s public website, https://lumiwed.com, the couple dashboard at https://app.lumiwed.com, guest-facing wedding sites and guest-token routes served through LumiWed, and related support, payment, and publishing flows (together, the “Service”). It explains what personal data we collect, how we use it, when we share it, how long we keep it, and what controls are available to couples and guests. For company details, see our Imprint. For cookies and similar technologies, see our Cookie Policy.
The Short Version
- LumiWed handles personal data needed to run a wedding website platform, including couple account data, wedding content, guest list data, RSVPs, photos, payment metadata, support messages, and technical usage data.
- Couples choose what content they publish. Depending on site visibility settings and how invite links are shared, wedding details and photos may be accessible to invited guests or broader audiences.
- Couples generally authenticate through Clerk. Guests usually access LumiWed through invitation links or guest tokens rather than full accounts.
- We use service providers to host the Service, store data, authenticate users, process payments, send emails, monitor errors, analyse product usage, and run AI-assisted features such as onboarding interviews and translations.
- We do not sell personal information.
- Couples can already manage some privacy actions inside LumiWed settings, including exports and guarded account deletion, and users can contact us for formal privacy requests.
Information We Collect
We may collect and process the following categories of personal information:
- Account and profile data, such as first name, last name, email address, auth identifiers, profile avatar, and optional notification phone number.
- Wedding workspace data, such as couple names, wedding date, schedule, venue information, travel and accommodation details, registry information, story content, translations, domain settings, site visibility settings, and reminder preferences.
- Guest management data, such as guest names, email addresses, invite status, guest token links, plus-one settings, RSVP responses, dietary preferences, and other event-related notes entered by the couple or guest.
- Uploaded media, such as photos used in wedding pages or galleries, and related storage metadata.
- Billing and transaction data, such as selected plan, Stripe customer or checkout identifiers, payment status, and invoice or tax-related records. Payment card details are processed by Stripe and are not stored by LumiWed.
- Marketing and support data, such as information submitted through contact or waitlist forms, including name, email address, subject, and message content.
- Technical and usage data, such as IP address, browser and device data, referrer information, cookie or local-storage identifiers, page views, event analytics, crash reports, and security logs.
How We Collect Your Information
We collect information:
- Directly from couples when they create an account, edit their workspace, upload photos, configure settings, contact us, or make a purchase;
- Directly from guests when they use invitation links, view guest pages, or submit RSVP information;
- From your browser or device through cookies, local storage, server logs, analytics, and similar technologies;
- From service providers such as Clerk and Stripe when sign-in, identity, billing, or checkout events occur;
- Through AI-assisted features when couples choose to use onboarding interviews or translation workflows.
How We Use Your Information
We use personal information to:
- Create and manage accounts, workspaces, and guest access;
- Host, publish, and deliver wedding websites and translated content;
- Send guest invitations, reminders, transactional emails, and support responses;
- Process RSVPs, guest communications, and couple notifications;
- Process payments, prevent fraud, manage billing, and meet tax or accounting obligations;
- Provide customer support, manage waitlist or sales enquiries, and improve onboarding;
- Operate AI-assisted features such as conversation-based onboarding and multilingual translation;
- Monitor performance, debug problems, protect the Service, and improve reliability and product decisions;
- Comply with law, enforce our Terms, and protect LumiWed, users, guests, and third parties.
GDPR Legal Bases
Where the General Data Protection Regulation or similar EU or EEA privacy law applies, LumiWed generally relies on the following legal bases:
- Contract necessity, when we need to process data to provide the Service requested by a couple or guest;
- Legitimate interests, such as securing the Service, preventing abuse, improving reliability, answering support requests, and operating the business responsibly;
- Consent, where we ask for it, including for optional marketing-site analytics and similar tracking technologies;
- Legal obligation, where we must keep or disclose data to comply with applicable law, tax, accounting, or law-enforcement requirements.
Published Content and Guest Access
LumiWed is designed to publish wedding information for guests. Content that couples choose to publish may include names, schedules, venue details, travel information, RSVP state, and photos. Depending on the couple’s settings, publication status, and how invitation links are shared, that content may be visible to invited guests and may in some cases be accessible to anyone with the relevant URL. Couples are responsible for reviewing what they publish and what they send to guests.
AI-Assisted Features
If a couple uses LumiWed’s AI features:
- Onboarding interview data may be processed through ElevenLabs conversational tooling to collect structured wedding details;
- Translation workflows may send wedding content and related language context through n8n automation and AI providers such as OpenAI and Anthropic to produce and quality-check translations.
We store the resulting structured outputs, translations, and related workflow metadata in LumiWed. Because these features require third-party processing, couples should not use them for content they are not comfortable submitting through those providers.
How We Share Your Information
We do not sell personal information. We share personal information only when needed to operate the Service, fulfil your request, comply with law, or protect rights and safety. Categories of recipients may include:
- Cloudflare, which hosts and secures LumiWed properties and routes traffic through its edge network.
- Supabase, which stores application data, relational records, and uploaded media.
- Clerk, which manages couple authentication and account identity.
- Stripe, which processes checkout, billing, payments, and tax-related flows.
- Resend, which delivers transactional or support-related email.
- PostHog and Sentry, which help us analyse product usage, feature rollout, and application errors.
- N8n, ElevenLabs, OpenAI, and Anthropic when AI-assisted interview or translation features are used.
- Other contractors or advisors who need limited access to support LumiWed under confidentiality or data-processing obligations.
We may also disclose information:
- When required by law, regulation, subpoena, court order, or similar legal process;
- To investigate, prevent, or address fraud, abuse, security incidents, or unlawful activity;
- In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to appropriate notice where required.
Retention and Deletion
We keep personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including contractual, legal, tax, accounting, security, and dispute-resolution needs. In practice:
- Account, wedding, guest, RSVP, translation, and photo data are generally retained for the lifetime of the active workspace and the applicable post-wedding retention period attached to the selected plan or extension;
- Website contact and waitlist submissions are retained for as long as needed to respond, follow up, or maintain a record of the enquiry;
- Analytics, monitoring, and security logs may be kept for shorter operational periods or in aggregated form;
- Billing and tax records may be retained longer where the law requires it.
When a couple deletes an account or a workspace reaches its lifecycle deletion point, LumiWed’s cleanup flows aim to remove the associated site URL, guest list, RSVPs, photos, and related records. Some residual copies may remain temporarily in backups or provider systems until their normal purge cycle completes.
Your Rights
Depending on the law that applies to you, you may have the right to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent where processing is based on consent.
LumiWed already provides some direct controls to couples, including settings to update account information, manage publication, export workspace data, and initiate guarded account deletion. For formal privacy requests, use the legal contact section in our Imprint. We may need to verify your identity before completing a request.
Guests may also contact the couple who invited them to correct invite or RSVP details, or contact us directly for platform-level privacy concerns.
If you are in the European Union, European Economic Area, United Kingdom, or another jurisdiction with similar rights, you may also have the right to lodge a complaint with your local supervisory authority. Because LumiWed is operated from the Netherlands, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) may also be relevant depending on the circumstances.
Cookies and Similar Technologies
We use cookies, local storage, and similar technologies to keep the Service working, remember preferences, secure sessions, measure usage, and understand performance. Where required by law, LumiWed treats optional analytics and tag-manager loading on the marketing site as consent-based. The specific categories and any consent controls shown on the website are described in our Cookie Policy.
Security
We use reasonable technical and organisational measures to protect personal information, including encrypted transport, access controls, tenant-scoped data separation, and provider security controls appropriate to a hosted web platform. No system can guarantee absolute security, so you should also protect your own credentials, devices, and invitation links.
Minors
LumiWed is intended for adults organizing and managing weddings. We do not knowingly provide couple accounts to children. Because weddings often include families, couples may upload or enter limited information about minor guests where that is necessary for invitation, RSVP, seating, or event logistics. Do not upload unlawful, exploitative, or unauthorized content. If you believe personal data about a child was submitted inappropriately, contact us and we will review the request.
International Transfers
LumiWed is operated from the Netherlands, but our service providers and hosting infrastructure may process data in other countries. Cloudflare in particular uses a global edge network, and other providers may store or process data within or outside the European Economic Area. Where required, we rely on appropriate contractual, organisational, and legal safeguards for international transfers, such as data processing terms and standard contractual measures used by our providers.
Third-Party Links
The Service may link to third-party sites, registries, maps, payment pages, or other external services that LumiWed does not control. Their privacy practices are governed by their own terms and policies.
Changes to This Policy
We may update this Privacy Policy from time to time as the product, legal requirements, or our providers change. When we do, we will update the date at the top of this page and, where appropriate, provide additional notice.
Contact
For privacy, legal, or compliance questions, use the legal contact section in our Imprint. Registered company details are available in our Imprint.