Privacy Policy

1. Data controller

The controller is I/E Guga Nadirashvili, identification number 01001071983, address: 1 G. Nizharadze, Tbilisi, Georgia. For any privacy question, write to info@weddsite.ge.

For the data of guests who fill in an RSVP on a client's invitation, the controller is the client (the couple or event organiser) and Weddsite acts as a processor storing and processing the data on the client's instructions (see section 4).

2. What we collect from clients

When you order an invitation we process:

• contact data: name, surname, phone number, email, the messenger account you write from;
• event details: the names of the couple or the person celebrated, date, locations, schedule, texts;
• photos and video you send us for the invitation;
• payment data: confirmation of your bank transfer (we never store card details);
• guest panel account data: username, hashed password, sign-in times.

Legal basis: performance of our contract with you and our legitimate interest (security of the service, bookkeeping). Data of other people shown in your photos is processed on the basis of the consent you obtained from them.

3. Data collected automatically

We use no analytics or advertising tools on weddsite.ge or on the invitations we build. Our hosting provider keeps technical data in server logs for a short time (IP address, browser type, time of request), which is necessary for security and troubleshooting. When an RSVP form is submitted, the IP address is used briefly only to limit repeated or automated submissions from the same address.

4. Guest data (RSVP and tables)

If you confirm attendance on a client's invitation, the form collects your name, surname, attendance answer, party size and, in some cases, companion names, locations or a message you leave. This data:

• is visible only to the client whose event it is and, for technical support, to Weddsite;
• is used only to organise the event: the guest list, table plan, and letting a guest find their table;
• is emailed to the client when an answer arrives or as a daily summary;
• is never used for marketing and never passed to anyone else.

If the "find your table" page is enabled, a guest's name and table number are visible to anyone who has the invitation link, so that guests can find their seat. If you do not want your name shown there, contact the event organiser or write to us.

5. Who we share data with

We do not sell data and do not share it for marketing. To run the service we use the following categories of providers, which process data only on our instructions:

• web hosting and servers (Vercel);
• database and RSVP storage (Neon and a managed Redis store);
• file storage and content delivery for photos and video (Bunny.net);
• email delivery for RSVP notifications (Resend);
• a domain registrar, if you order your own domain.

These providers' servers may be located outside Georgia (in the EU and the USA). We choose providers that meet recognised security standards and are contractually bound to protect the data.

We may disclose data where required by law or by a competent public authority.

Invitations we build may embed a third-party service such as a Google Maps map. Such a service may set its own cookies under its own policy.

6. How long we keep data

• invitation content (names, photos, texts) and guest answers: no longer than 6 months after the event date, unless the client asks for earlier deletion or we agree to keep the website live longer;
• client contact and payment data: for the period required by accounting and tax law;
• guest panel account: deleted when the website is taken offline;
• server logs: the hosting provider's standard short retention.

7. Security

Data travels over encrypted connections (HTTPS). The guest panel is password-protected, passwords are stored hashed, and sign-in attempts are rate-limited. We do not collect or store card details. No transmission over the internet is completely secure, so please do not share your panel password.

8. Your rights

Under the Law of Georgia on Personal Data Protection you have the right to:

• know which of your data we process and receive a copy;
• have inaccurate data corrected or completed;
• ask for erasure, or for processing to stop or be restricted;
• withdraw consent at any time where processing is based on consent;
• receive your data in a structured format (for example an Excel file from the guest panel);
• complain to the Personal Data Protection Service of Georgia (personaldata.ge) or to a court if you believe your rights were violated.

To exercise these rights, write to info@weddsite.ge. We answer within the statutory period and no later than 10 working days. If you are a guest and your request concerns a client's event, we may forward it to the client or act on their instructions.

9. Children

Our service is intended for adults. Children's names may appear on a guest list only through an answer submitted by a parent or guardian.

10. Changes

When we update this policy we publish the new version on this page with its date. We notify current clients of material changes by email or messenger.