Privacy Policy
LTUpdated: 2026-06-14
Who we are
VowBoard is a wedding website platform. Data controller: VowBoard (contact: djpokis@gmail.com). All data is stored in Google Cloud’s EU region (europe-west1).
What data we process
Provided by the couple: names, account email (at signup — used for support and to identify your account), event date and venue, page content, guest list (names, groups, language). Provided by guests: RSVP answer, party size and names, meal choice, dietary restrictions, message to the couple, gift claims.
Google sign-in
If you choose to sign in with Google, we receive and store your Google account identifier and email address — solely to recognise you at login and link you to your event(s). We request only the “openid email profile” scopes and read no other Google data. A single event can be co-managed by up to 5 Google accounts (the couple and co-owners). You can unlink at any time in settings. Google sign-in is optional — you can use your login key instead.
Dietary information
Dietary details (which may indirectly reveal health or religious information) are provided voluntarily, used solely for catering, visible only to the couple, and deleted together with the event.
Invite analytics
We record when a guest first opens their personal invite link, so the couple can follow up only with those who haven’t opened it. This is visible only to the couple (on the Premium plan) and is deleted together with the event.
Cookies
Essential cookies: login sessions (vb_admin, vb_owner), the Google sign-in CSRF cookie (vb_oauth, short-lived) and the admin language preference (vb_lang) — these always run. Analytics cookies (Google Analytics) load ONLY after you accept them in the cookie banner; your choice is stored in your browser. During checkout, Stripe may set its own cookies to process payment securely. We use no advertising cookies.
Retention
Event data is kept for the plan term from creation — Free 6 months, Wedding 12 months, Premium 18 months — then deleted. Data can be deleted earlier at the couple’s or your request. A couple can request full deletion at any time in settings — access is removed immediately and all data (including photos) is permanently erased after confirmation. An anonymous testimonial, if you published one, may be retained.
Your rights
You have the right to access, correct, or delete your data. You can request full deletion directly in your account settings, or by email. Guests can contact the couple who invited them, or us directly by email. We respond to requests within 30 days.
Sharing
We never sell or rent data. Our technical provider is Google Cloud (EU data centres, GDPR data processing agreement).