Privacy Policy

Welcome to CloudInvites. We respect your privacy and are committed to protecting it through our compliance with this policy. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit the website cloudinvites.wedding (our "Website") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Because our primary market is the Philippines, this Privacy Policy strictly adheres to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

1. Data Controller vs. Processor Dynamics

How we classify your data depends on your relationship with us:

• Couples (Hosts): For individuals who create an account and purchase our services to host their wedding website, CloudInvites acts as the Personal Information Controller (PIC) for your account, billing, and profile data.
• Guests: For guest data (such as names, contact info, and RSVP responses) uploaded by the Couple or submitted directly by the Guest via the platform, the Couple is considered the PIC. In this scenario, CloudInvites acts strictly as the Personal Information Processor (PIP), processing data on behalf of the Couple.

2. Information We Collect

We collect several types of information from and about users of our Website, including:

• Account Details & Event Information: Names, email addresses, phone numbers, and wedding details provided during registration and onboarding.
• Guest Information: Names, contact details, and attendance status.
• Sensitive Personal Information: We may collect data regarding Dietary Restrictions or Allergies from guests via our digital RSVP forms. Because guests input this information directly into our system, guests are required to consent to this Privacy Policy upon submitting their RSVP. This data is strictly used for the purpose of meal planning and catering for the event.
• Payment Information: Processed securely via our third-party payment gateway. We do not store raw credit card numbers or e-wallet credentials.

3. Third-Party Data Sharing

We do not sell your personal data. We disclose personal information to contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them. These include:

• PayMongo: For processing payments securely.
• Google Gemini API: Certain text and planning data (e.g., event details) may be sent to Google Gemini AI models to generate intelligent checklists, budgets, and narrative stories. We assure users that this data is processed exclusively for feature generation and is not used to train public AI models.
• Infrastructure Providers: Our application is hosted on Fly.io (with servers located in Singapore) and we use Cloudflare R2 for asset storage. By using our service, you consent to the cross-border transfer of your data to these secure servers.
• User-Initiated Sharing (CloudSync & CloudCollab): Our platform provides features that allow Couples to generate shareable links to collaborate with third parties (e.g., wedding coordinators, caterers, or vendors). When a Couple utilizes these features to share guest lists, seating charts, or dietary restrictions, the Couple is solely responsible for ensuring they have the right to share this data with those third parties. CloudInvites acts only as the facilitator of this user-initiated sharing.
• Delegated Access (Coordinators): If you choose to link your account with a third-party wedding coordinator or allow them to manage your event directly on our platform, you explicitly consent to granting them access to your event data, including your personal information and that of your guests. CloudInvites acts solely as the platform facilitating this delegated access.

4. Data Retention & Deletion

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. Specifically, wedding data hosted on tenant subdomains (e.g., jane-and-john.cloudinvites.com) will be retained for the duration of your active subscription or free trial. Following the expiration of your subscription or a set period after the wedding date, subdomains and associated guest data may be securely recycled or deleted from our active servers. You may request account deletion at any time by contacting our support team.

5. Your Rights Under the Data Privacy Act

As a data subject in the Philippines, you are entitled to the following rights under RA 10173:

• Right to be informed: You have the right to know when your personal data shall be, are being, or have been processed.
• Right to object: You can object to the processing of your personal data.
• Right to access: You can demand access to your personal data.
• Right to rectify: You have the right to dispute the inaccuracy or error in the personal data and have it corrected.
• Right to erase or block: You can suspend, withdraw, or order the blocking, removal, or destruction of your personal data.
• Right to damages: You can claim compensation if you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data.
• Right to data portability: You can obtain and electronically move, copy or transfer your personal data in a secure manner.

6. Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, or to exercise your rights under the DPA, please contact us at: privacy@cloudinvites.wedding.