Privacy Policy

1Who We Are

Vowlio is a wedding planning and vendor marketplace platform. We operate the website and mobile applications available at vowlio.com and related subdomains. References to "Vowlio," "we," "us," or "our" in this policy refer to the Vowlio platform and its operators.

We serve two types of users: couples who are planning their wedding, and vendors who provide wedding-related services. Some sections of this policy apply differently depending on your role.

2Information We Collect

Information You Provide Directly

• Account information — your name, email address, and password when you register.
• Couple profile — partner names, wedding date, venue location, estimated guest count, total budget, wedding style, and your written vision description.
• Vendor profile — business name, vendor category, location, description, portfolio photos, pricing, and contact information you choose to display publicly.
• Guest list — names, email addresses, phone numbers, RSVP status, meal preferences, and seating assignments for your wedding guests.
• Budget data — categories, estimated costs, actual costs, vendor names, and payment status you enter into the budget tracker.
• Lead requests & proposals — the details of vendor requests you post as a couple, and proposals you submit as a vendor.
• Reviews — written reviews and star ratings you submit about vendors.
• Payment information — billing details processed securely through Stripe. We do not store your full card number on our servers.
• Communications — messages or support requests you send us.
• Registry data — item names, store names, prices, purchase links, and the name and optional email of guests who mark items as purchased.
• Mood board & inspiration — image URLs you pin from external sources and any notes you attach. We store the URL only; we do not host or copy the image itself.
• Planner access — the email address of any planner you invite, and the planner's email/identity when they accept the invitation.

Information Collected Automatically

• Usage data — pages visited, features used, time spent, search queries, and click patterns.
• Device & browser data — IP address, browser type, operating system, and device identifiers.
• Cookies & similar technologies — see Section 8 for details.

3How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide the Vowlio service.
• Match couples with relevant vendors based on category, location, and budget.
• Enable vendors to respond to lead requests and receive booking inquiries.
• Process subscription payments and manage your billing history.
• Send transactional emails such as new proposal notifications, RSVP updates, and account confirmations.
• Send service and product updates (you may opt out of marketing emails at any time).
• Improve our platform through analytics and usage research.
• Detect, investigate, and prevent fraud or abuse.
• Comply with legal obligations.
• Automatically cancel couple subscriptions at their wedding date, as described in our Terms of Service, by communicating with Stripe using only the subscription ID we hold on file.
• Display wedding registry pages publicly (to anyone with the registry link) when a couple has set their registry to public.

4How We Share Your Information

Between Couples and Vendors

When you submit a vendor lead request as a couple, the details of that request (vendor category, location, event date, budget range, and your description) are visible to vendors who match the request. Your full name, email address, and guest list are not shared with vendors unless you choose to include them.

Vendor profiles — including business name, photos, location, and reviews — are publicly visible to all site visitors.

With Wedding Planners

When a couple invites a planner and the planner accepts, the planner gains access to the couple's guest list, budget, checklist, vendor leads, and inspiration boards. Planners agree to use this access only for the benefit of that couple. Couples may revoke planner access at any time.

Wedding Registry

When a couple's registry is set to public, anyone with the registry link can view the couple's first names, wedding date (if set), and gift list. When a guest marks a registry item as purchased, their name and optional email are stored and visible to the couple.

Service Providers

We share information with trusted third-party service providers who help us operate Vowlio, including:

• Stripe — payment processing
• DigitalOcean — cloud hosting and infrastructure
• SendGrid / SMTP providers — transactional email delivery

These providers are contractually obligated to protect your data and may only use it to provide services on our behalf.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Vowlio, our users, or the public.

Business Transfers

If Vowlio is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you before your data is subject to a materially different privacy policy.

5Data Retention

We retain your account information and wedding data for as long as your account is active or as needed to provide services. If you delete your account:

• Your profile, guest list, budget, and checklist data are deleted within 30 days.
• Lead requests and associated proposals are anonymised and retained for platform integrity and fraud prevention for up to 12 months.
• Reviews you have left for vendors are retained but disassociated from your identity.
• Billing records are retained for 7 years as required by financial regulations.

6Your Rights & Choices

You have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — update or correct inaccurate information directly in your account settings, or by contacting us.
• Deletion — request deletion of your account and associated personal data.
• Portability — request an export of your data in a machine-readable format.
• Opt-out of marketing emails — use the unsubscribe link in any marketing email, or update your notification preferences in account settings. You will still receive transactional emails (e.g. booking confirmations) even if you opt out of marketing.

To exercise any of these rights, contact us at privacy@vowlio.com. We will respond within 30 days.

If you are a resident of California, the EU, or another jurisdiction with specific privacy laws, additional rights may apply to you. Please contact us for more information.

7Payment Processing (Stripe)

All subscription payments are processed by Stripe, Inc., a PCI DSS-compliant payment processor. When you enter payment information on Vowlio, it is transmitted directly and securely to Stripe. Vowlio never receives, stores, or has access to your full credit card number, CVV, or bank account details.

We receive from Stripe only the information needed to manage your subscription: a customer ID, subscription status, billing period dates, and a redacted description of your payment method (e.g., "Visa ending in 4242").

Stripe may retain your payment information under their own privacy policy. We encourage you to review Stripe's Privacy Policy.

8Cookies & Tracking

Vowlio uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how people use our platform.

Types of cookies we use

• Essential cookies — required for the site to function, such as keeping you logged in and maintaining your session. These cannot be disabled.
• Analytics cookies — help us understand how visitors interact with the site (e.g. which pages are visited most). We use this data in aggregate to improve the product.
• Preference cookies — remember settings such as your preferred billing period (monthly vs annual) on the pricing page.

You can control cookies through your browser settings. Disabling non-essential cookies will not prevent you from using Vowlio, but some features may behave differently. For full details, see our Cookie Policy.

9Security

We take reasonable technical and organisational measures to protect your personal information, including:

• HTTPS encryption for all data in transit.
• Passwords stored as cryptographic hashes using ASP.NET Core Identity (bcrypt-based). We never store plaintext passwords.
• Payment data handled exclusively by Stripe, a PCI-DSS certified provider. Raw card numbers never touch our servers.
• HTTP security headers on every response: Content Security Policy, X-Frame-Options, X-Content-Type-Options, HSTS, and Referrer-Policy.
• Rate limiting on authentication endpoints to reduce brute-force risk.
• Access controls limiting which team members can access user data.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

10Children's Privacy

Vowlio is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice on the platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Continued use of Vowlio after a policy update constitutes your acceptance of the revised policy.

12Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out:

We aim to respond to all privacy-related inquiries within 30 days.