Privacy Policy
Last updated: April 25, 2026
Data controller
Wedillybird, a platform operated by Tuum Agency, is the controller for the data collected through the Service.
Data collected
Phone number (authentication), name and email (profile), information related to the weddings being organised (dates, venues, guest lists), photos shared in the gallery, technical logs (IP, user-agent).
Purposes
Provide the Service, authenticate users, send invitations and notifications, process payments, prevent fraud, improve the platform.
Legal bases (GDPR)
Performance of the contract (account, payments, features), legitimate interest (security, abuse prevention), consent (non-essential cookies, marketing communications).
Retention period
Account data: duration of the subscription + 3 years. Payment data: legal duration (10 years for invoicing). Technical logs: 12 months maximum. Biometric face data (face search, when enabled): until the gallery expires or the feature is disabled, whichever comes first — see “Biometric data” below.
Subprocessors
Convex (database, US), Vercel (hosting, US/EU), Stripe (payments, EU/US), Twilio (SMS delivery, US/Canada), Meta WhatsApp Cloud API (message delivery, EU/US), Amazon Rekognition Faces (biometric face indexing for the optional face-search feature, only for weddings where the couple has explicitly opted in — see “Biometric data” below, EU). Data is minimised, never resold or shared with third parties for marketing. All bound by standard contractual clauses or equivalent mechanisms.
Biometric data (face search)
Face search is an optional, opt-in feature: it is OFF by default and only processes guests' faces for weddings where the couple has explicitly enabled it, after reviewing this notice. Legal basis: explicit consent, given by the couple on behalf of the wedding (see Terms of Service). Data processed: facial geometry extracted from approved gallery photos (Amazon Rekognition), used only to match a guest's selfie against the gallery — the selfie itself is never stored. Retention: until the gallery expires or the couple disables the feature, whichever comes first; deleted automatically within 24 hours by a daily purge job, or sooner on request. This feature is not offered for weddings held in Illinois, Texas, or Washington.
Your rights
Access, rectification, erasure, objection, portability, restriction. To exercise a right, write to privacy@wedillybird.com. You can also file a complaint with the CNIL.
Contact
Email: privacy@wedillybird.com. Reply within 30 days in line with the GDPR.