Privacy Policy
Updated: 2026-07-14
Who we are
VowBoard is a private wedding and event website platform. Data controller: VowBoard (contact: djpokis@gmail.com). All data is stored in Google Cloud’s EU region (europe-west1).
What data we process
Provided by organizers: names or event title, account email, event date, time and venue, page content, and guest list. Provided by guests: RSVP, attendee names, meal choices and dietary restrictions, messages, wedding gift claims, and commitments to event tasks or items to bring.
Google sign-in
If you choose to sign in with Google, we receive and store your Google account identifier and email address — solely to recognise you at login and link you to your event(s). We request only the “openid email profile” scopes and read no other Google data. A single event can be co-managed by up to 5 Google accounts (the couple and co-owners). A guest may also optionally link their exact personal invitation so they can find it on other devices; the invitation remains fully usable without a Google account. Organizer links can be removed in settings.
Dietary information
Dietary details (which may indirectly reveal health or religious information) are provided voluntarily, used solely for catering, visible only to the couple, and deleted together with the event.
Invite analytics
We record when a guest first opens their personal invite link, so the couple can follow up only with those who haven’t opened it. This is visible only to the couple (on the Premium plan) and is deleted together with the event.
Cookies, product analytics, and installed app
Essential cookies maintain login sessions, Google sign-in protection, language choice, and personal-invitation recovery scoped to that event path. An installed PWA stores the names, dates and guest name of already-authorized invitations, event-specific recovery data, and the latest agenda on that device so invitations can be found, reopened, and used with limited offline access. The invitation token is not stored in the app manifest or launch URL. “Forget this invitation on this device” or clearing site data removes it. Only after “Accept all”, Google Analytics may run on public VowBoard marketing pages and receive anonymous product steps together with plan, event type, and language values. Analytics never loads on invitation, admin, owner, PWA, calendar, or API routes and never receives query strings, names, emails, event titles, addresses, slugs, or invite tokens. Google signals and ad personalization are disabled; we use no advertising cookies.
Retention
Event data is kept for the plan term from creation — Free 6 months, Standard 12 months, Premium 18 months — then deleted. Data can be deleted earlier at the organizer’s or your request. An organizer can request full deletion at any time in settings — access is removed immediately and all data (including photos) is permanently erased after confirmation. An anonymous testimonial, if you published one, may be retained.
Your rights
You have the right to access, correct, or delete your data. You can request full deletion directly in your account settings, or by email. Guests can contact the couple who invited them, or us directly by email. We respond to requests within 30 days.
Sharing
We never sell or rent data. Our technical provider is Google Cloud (EU data centres, GDPR data processing agreement).