Privacy and your choices

Who is responsible

Vowmora is operated by Oryvelon LLC, a company registered in the United States. For the processing described in this notice, Oryvelon LLC is the controller. Contact info@vowmora.com with a privacy enquiry or rights request. The confirmed official postal address will be added when supplied.

This notice describes the editorial website, source-based venue and supplier address book, personal planning tools and business-enquiry form. Vowmora does not collect wedding bookings or payments. Newsletter registration remains closed; an enquiry does not create a newsletter subscription.

Browsing and essential operation

The website is hosted by Hostinger. Requests necessarily provide technical information such as the requested address, IP address and browser or device details to the hosting infrastructure. We use essential operation and security information to serve pages, prevent abuse and diagnose faults. Our lawful basis, where UK or EU data-protection law applies, is our legitimate interest in a functioning and secure publication.

Editorial sign-in uses Supabase, with the Vowmora project located in Ireland. Authentication cookies and session records are used for authorised editorial access and two-step verification. Public readers do not need an editorial account. We do not expose private editorial roles, session secrets or newsletter records in public pages.

Your planning tools

The visual wedding quiz, planning challenges, couple-priorities game, season poll and venue brief work in your browser. Their answers are not submitted to a wedding provider. Saving a result puts it into your device’s wedding plan; if you later save that plan online, the saved result is part of that plan. Public search returns our articles; optional analytics does not receive search queries.

My Wedding Plan uses local storage for your wedding date, currency, saved direction, checklist, custom tasks, guest or household names, invited and attending party sizes, invitation and reply statuses, table allocations, budget, address-book shortlist, venue comparisons, invitation wording, seating tables and room positions, invitation design choices, day schedule and preparation lists. Device-only planning does not require sign-in. Local information remains until you clear the plan, clear site storage or the browser removes it. Downloads and printed plans contain the details you entered; keep them appropriately. Calendar exports contain task titles and dates shared with your chosen calendar when imported; its alert settings apply. Invitation card downloads include your wording and any reply information you enter. Choosing Share uses your device’s sharing service. Open in email app passes the wording to your chosen mail app; you choose recipients and send it yourself. Vowmora does not automatically send wedding invitations to guests.

If you choose shared planning, we use Supabase authentication to verify your email with a one-time code delivered through Resend. Necessary planning-session cookies are separate from editorial sign-in. Your email, authentication and session records are processed by Supabase; operational email records are processed by Resend. Signing in does not send your device plan online or subscribe you to marketing. Creating an online copy or choosing Save sends that plan to the dedicated Supabase project in Ireland. Automatic saving is enabled when an online plan is created or opened; you can pause it in Share & RSVP. While the page is open and visible, it sends valid edits and checks for partner changes and guest replies about every six seconds. Independent changes can be merged; changes to the same detail pause automatic saving for review. Network failures leave your device copy available for download and later retry. Manually loading another online copy replaces your working device copy only after your confirmation. We provide the account and saved-plan service at your request; essential security and abuse prevention support its operation.

A shared plan is accessible to its owner and one invited partner. Invitations are bound to the specified email and expire after seven days. A partner can view and edit the entire plan, including the guest list and budget. The owner can cancel an unused invitation, remove partner access or delete the online plan; a partner can leave. Access removal stops future online access and reminder processing, but cannot remove copies already downloaded. Online plan deletion also removes its invitation, RSVP-link, reminder and mail-job records. Local copies, account authentication records and provider backups are separate. Contact info@vowmora.com for an account or data-rights request.

Private household reply links let their holders view only that household’s name, the hosts’ entered names, date and venue, and the permitted party size. Replying saves attendance status, number attending and reply time to the hosts’ online plan. The invited size and actual attendance are recorded separately. A link can be used again to amend a reply until it expires or is replaced or revoked. Reply links expire after 18 months and are removed by daily retention. Hosts should share each link only with its intended household and inform guests how their details will be used. We process guest details to provide the requested planning and response service, with a legitimate interest in a private, functioning planning tool. Keep sensitive health, identity and private guest information out of these tools; discuss individual arrangements privately.

Planning reminder emails are a separate, explicit choice for each signed-in person and plan. We record the verified email, choice, consent time and version. When enabled, a single digest is queued around 8 am UK time if unfinished tasks in the saved online plan are due the next day. It gives the number of due items and a link to the plan, without guest names, budgets or task descriptions. You can turn reminders off in Share & RSVP or through a reminder email. We use your consent for these optional emails. They do not subscribe you to the newsletter. Provider acceptance is recorded separately from inbox delivery; unsuccessful sends have a limited retry window.

For abuse prevention we keep keyed rate-limit hashes, not raw client addresses in planning rate records, for up to two days. Unused partner invitations expire after seven days. Planning mail-job records are removed after 90 days. Private online plans remain until their owner deletes them or we handle an applicable data request; we do not currently impose automatic plan-expiry deletion. Authentication logs and backups follow the relevant provider’s retention. Your Edit separately stores saved story paths in this browser and has its own remove controls.

Optional analytics and your choice

When enabled, we use Google Analytics 4 through Google Tag Manager to understand which public guides are useful. The measurement tags load only after you choose Allow analytics. Declining leaves optional analytics off. You can use Privacy preferences to change your choice; withdrawing stops our measurement events and removes this property’s analytics cookies from this browser.

We record public page paths and basic browser/device information for this purpose. Our page-location and referrer values omit query strings and fragments; we do not send form contents, email addresses, planning answers or user identifiers to Google. Editorial sign-in, administrative pages, private RSVP and reminder-preference pages, and newsletter confirmation are excluded. Advertising storage, personalisation and Google Signals are disabled in our implementation.

Our lawful basis for optional analytics is consent where UK or EU law applies. The preference is stored locally for up to 180 days, after which we ask again. Analytics cookies are configured for up to 180 days; clearing them, using another browser or withdrawing consent can end them sooner. Google processes data under its own service arrangements, which can involve locations outside your country. The Google resource below explains its processing.

After analytics consent and tag readiness, reader actions may record a guide save, quiz or challenge completion, guest-add action, calendar export, address-book shortlist save, successfully received business enquiry, newsletter confirmation request, or a named provider-resource click. These events use the public page path and, where relevant, a public resource slug or destination hostname. They do not include guest names, dates, budgets, email addresses, proposal text, quiz answers, search queries or personal identifiers. A completion or receipt event is not evidence of a booking, sale, qualified lead or confirmed subscription.

Business enquiries, messages and newsletter records

If you email us, we use the information you choose to send to respond and handle the enquiry. Business email is provided through Hostinger. Our basis is our legitimate interest in communicating with readers and businesses; where a request concerns an intended contract, steps at your request may also apply. Include only relevant information in an initial message.

The business-enquiry form collects your name, business name, business email, official website or portfolio URL, proposal type, discipline, country or regions, optional timing and budget, proposal text, and the confirmations you make about contact and publication permissions. We use these details to review and respond to the proposal. They are stored privately in the dedicated Supabase project. Access is restricted to the operational team through the protected editorial workspace. Submitting does not automatically publish your material or send your proposal to a listed wedding provider.

Real wedding submissions additionally collect the couple’s names for review, event date and venue, photographer or rights-holder name, a private review gallery link, supplier credits, commercial relationships and confirmations that couple and photographer permissions can be provided. We use this information privately to assess a proposed story and verify rights. These initial confirmations do not themselves publish a story or replace the required image licence and written permissions. A gallery link does not grant publication rights.

Resend sends a transactional receipt to the email you provide and a notification to info@vowmora.com. Our business inbox is provided through Hostinger. We record send attempts and provider acceptance separately; acceptance does not prove inbox delivery. To limit repeated submissions we store keyed hashes of the email and client address, an enquiry reference, creation time and review status. We do not store the raw client IP address in the enquiry record. These form details are not sent to Google Analytics. The existing enquiry-retention approach below applies; an enquiry is not a marketing opt-in.

The staged newsletter uses Resend for email delivery and Supabase for consent records. A subscription requires a separate request and explicit confirmation; it is not created by accepting analytics. Existing confirmation links expire after 24 hours and can be used once. An unsubscribe action removes the email address from our subscriber record and prevents further editions. We have not activated public registration or scheduled a marketing campaign.

For newsletter abuse prevention, our request mechanism uses a keyed client-address hash and send reservations. Pending records are deleted after seven days; client-address hashes are cleared after 32 days. Minimal consent and delivery audit records are retained for up to 24 months, and unsubscribed records are deleted after that period. A daily database task applies these limits. Provider delivery logs and hosting or email backups follow the providers’ own retention arrangements; these database limits do not imply immediate deletion of all provider copies.

Retention, providers and international processing

We keep enquiry information only as long as needed to respond, manage the relationship and meet applicable obligations. We have not set one fixed period for every message or infrastructure log. You can ask about the records relevant to your request. Necessary security, legal or backup records may remain for their applicable retention period.

Hostinger, Supabase, Resend and Google provide the services described above. Access to personal information is limited to the relevant operational purpose; we do not sell personal information or share it with wedding providers through an enquiry form. Shared planning deliberately makes a plan available to the owner’s invited partner; private RSVP replies are shared with the hosts. Processing may occur outside your country, including the United States and other provider locations. Applicable provider agreements and transfer safeguards need to be assessed for the particular service; storage of the Supabase project in Ireland alone does not mean every provider processes all data only in Europe.

External links take you to other organisations, whose privacy practices apply on their sites. Where we introduce another service or purpose, we will update this notice before collecting information for it.

Your rights and contact

Depending on the law that applies and the circumstances, you may request access, correction, deletion, restriction or portability of personal information, object to certain processing and withdraw consent. Email info@vowmora.com with the request. Withdrawal does not affect processing carried out on consent before it was withdrawn. Some rights have legal conditions or exceptions.

We may request proportionate information to verify a request, but do not send identity documents in your first message. You can also complain to the relevant supervisory authority, including the ICO in the UK or your local EU data-protection authority. The ICO resource below explains the information organisations should provide; it is guidance, not a certification of Vowmora.