Privacy policy

Gathered Day runs Gathered Day. This policy covers the website, the app and the emails we send. When a couple, planner or venue adds other people, such as guests or vendors, they decide what goes in and why, and we look after it for them. If you're on someone's guest list and have a question about your details, ask them, or write to us.

• Your account: your name, email address and password (kept only as a one-way hash by our sign-in provider), the sign-in codes we send, and the studio or wedding you belong to and your role there.
• Your wedding: whatever you enter, such as the date, venue, budget and payments, vendors and their contracts, checklist, messages, files and photos, floor plans, designs and notes.
• Guests and other people you add: names, households, mailing addresses, email addresses and phone numbers if you add them, RSVP answers, meal choices, seating, and notes such as needing wheelchair access or a high chair. Guests can also give or change their own reply, meal and mailing address through their private link.
• Payments: Stripe collects your card details when you pay, and we never see or store your full card number. We keep what you bought, the amount, the date, its status and Stripe's reference for you.
• Gifts: the buyer's name and email, the couple's names, the message, and the couple's email if the buyer gives it. Gift codes are kept only in a scrambled (hashed) form.
• Referrals: who referred whom, and whether a thank-you or a free month is owed or has been sent.
• Email sent to a wedding: each wedding has a private reply address. When someone writes to it, we receive the message, the sender's details, and the email provider's check on whether the sender is who they say they are, and file it on that wedding.
• Feedback: when you use the Feedback button, we keep what you type, a voice note if you record one, the page you were on, your screen size, the kind of device and browser, your role and studio, and the version of the app. A tester's last few steps in the app go with it. Voice notes are stored privately, and only our team can read or play feedback.
• Technical details: your IP address and basic request details in our servers' logs, which we use for security and rate limits.

Some people agree to help us test Gathered Day. We keep that list by email address, and you can ask to come off it at any time. For testers we record how they move through the app:

• which pages they open (the address only, with ids and search terms taken out);
• which buttons and links they tap, by their label, with names, emails and numbers masked;
• which fields they click into, by the field's label;
• scrolling, pauses, and time spent on each page.

We never record what testers type, the rest of a page's address, or any text on the Inbox, Messages and Ask Bea pages. These records are deleted after 90 days.

We use only what the app needs to work, and we don't use advertising or analytics cookies. If you add a Pinterest board, a Canva design or a Spotify song to a wedding, that company's own embed loads when the page shows it, and its own cookies and privacy policy apply.

• Sign-in cookies, which keep you signed in.
• A referral cookie for 30 days when you open someone's referral link, so they get their thank-you.
• Short-lived cookies while you buy or redeem a gift (about an hour), or accept a vendor invitation.
• In your browser's own storage: the sign-in code step in the installed app, and, for testers, a session id that resets after 30 minutes without activity.
• The installed app keeps copies of its own scripts and images so it opens quickly. It never keeps copies of your pages or data.

• To run Gathered Day, and to show your information to the people you share it with.
• To send the emails described below.
• To take payments, send gifts, and send referral thank-yous and free months.
• To keep accounts and the service safe, for example by limiting repeated attempts and stopping abuse.
• To answer you when you write to us, and to fix problems.
• To improve the product, from feedback and from testers' records.
• To meet legal duties, such as keeping tax records.

We don't sell personal information, and we don't use it for advertising.

Ask Bea, suggested tasks from messages, and reading a vendor's document use an AI model run by Anthropic. When one of these runs, we send Anthropic the parts of your wedding it needs for that answer, such as the checklist, budget, vendors and guests, or the message or document itself. We use Anthropic's commercial service, whose terms don't let it train its models on what we send. We keep the conversation and usage counts in your workspace so you can see them and so limits apply. Suggestions for email from outside the wedding, and for vendors' messages, use simple rules instead of AI.

• The people you share with. Your partner; your planner's or venue's team, according to their role; and vendors you invite to the vendor portal. Vendors see only what's meant for them, such as their own messages, the timeline and the files you choose to share, and never your budget, your private notes, or your guests' names and contact details. Each guest sees only their own household's invitation. Someone sent a 3D preview of a venue sees only the rooms in that link.
• Our team. We can see account and billing details, feedback, and counts such as how many weddings an account has. We look at what's inside a wedding only when you ask us for help, or to look into abuse or a security problem.
• Companies that run parts of the service for us, under contract and only for that purpose:
  • Supabase: the database, sign-in and file storage
  • Vercel: hosting the website and app
  • Resend: sending and receiving email
  • Stripe: payments
  • Anthropic: the AI features above
  • Cloudflare: the “are you human” check on public forms
  • Prodigi and Lob: printing and posting cards you order, so they receive the card art and the mailing addresses for that order
  • OpenStreetMap: the map tiles on venue maps, so their servers see your IP address when a map loads
  • Pinterest, Canva and Spotify: only when a wedding shows a board, design or song someone added, which loads from their servers
• When the law requires it, or to protect someone's safety or our rights. If Gathered Day is ever sold or merged, your information would move with it under this policy.

• Sign-in codes and links.
• Invitations to join a wedding, a studio or the vendor portal.
• Notifications about messages, proposals, bookings and venue documents. Planners and couples planning on their own can choose which they get in Settings → Notifications.
• If you send a studio an inquiry or book a time on its booking page: the confirmation, and anything the studio sends you through the app, such as a 3D preview of its venue.
• Gift codes and cards, and receipts (Stripe sends those).
• Waitlist emails, if you joined the waitlist.
• On a wedding weekend, live updates to that wedding's vendors.
• Newsletters a studio sends to the people who subscribed to it.

Newsletters and vendors' live updates carry a one-click unsubscribe, and an unsubscribe sticks. Messages you reply to by email are filed on the wedding they belong to.

• Your account and weddings, for as long as they exist. We don't delete a wedding because it hasn't been paid for.
• Testers' records, 90 days.
• Feedback, until we no longer need it to improve the product.
• The record of emails we've sent and the unsubscribe choices people make, even after a wedding is deleted, so an opt-out keeps working.
• Payment records, for as long as tax law requires (usually seven years).
• Backups, for a limited time, after which they're overwritten.

• See and download: couples can download their guest list and addresses from Billing at any time. Ask us for a copy of anything else we hold about you.
• Correct: change most things yourself in the app, or ask us.
• Delete: email us from the address on your account and we'll delete your account, and any workspace only you own, within 30 days. A wedding you shared with a planner or venue is also part of their records, so we'll remove you from it and tell them.
• Stop: unsubscribe from newsletters and live updates in one click, choose your notifications in Settings, and ask to stop being a tester.

Depending on where you live, you may have more rights over your information, for example in California or the EU. We honor these requests wherever you are, and we won't treat you differently for making one.

Accounts are for adults (18 or older). A guest list can include children whose names a couple adds, and we use those only for that wedding. We don't knowingly collect information directly from children under 13.

Everything travels over an encrypted connection. Access rules in the database keep each account to its own workspaces. Sign-in codes expire, and gift codes and most private links, such as vendor and 3D preview links, are stored only in hashed form. No system is perfectly secure, so if a breach affects your information, we'll tell you as the law requires.

Your information is stored in the United States.

If we change this policy, we'll update the date at the top. If the change matters, we'll also tell you by email or in the app before it takes effect.

Questions, or a request about your information: hello@gatheredday.com.