Privacy Notice

Who we are

This Privacy Notice is provided by Vladana Celebic, a sole trader in Sweden, trading as Vow Vault. We are the data controller for the personal data described below.

What personal data we collect

• Account data: name, email address and authentication credentials.
• Wedding data: couple names, wedding date, venue or city, cover image and design preferences.
• Guest contributions: guest name, written messages, photographs, short videos, voice recordings and relationship to the couple.
• Technical data: IP address, browser and device information, and usage telemetry.
• Support data: messages and correspondence you send us.

How we use your data

• To provide the service: creating your account, hosting your wedding page and delivering guest contributions to you.
• To secure the service: fraud prevention, abuse detection and technical security.
• To improve the service: analytics, troubleshooting and product development.
• To communicate with you: account notifications, support responses and, with your consent, marketing messages.
• To meet legal obligations: tax, accounting and regulatory compliance.

Legal basis

We process personal data on the following legal bases:

• Contract performance: providing the service and fulfilling our agreement with you.
• Legitimate interests: security, fraud prevention and service improvement, balanced against your privacy rights.
• Consent: marketing communications and non-essential cookies.
• Legal obligation: tax, accounting and regulatory requirements.

Who we share data with

• Paddle, our Merchant of Record, for payment processing, subscription management, tax compliance and invoicing.
• Cloud and hosting providers that store and process data on our behalf.
• Analytics providers that help us understand how the service is used.
• Professional advisers such as legal and accounting consultants.
• Authorities when required by law or to protect our rights.

International transfers

We primarily store and process data within the European Economic Area. Some service providers may process data outside the EEA; when this happens, we ensure appropriate safeguards such as Standard Contractual Clauses are in place.

Data retention

We keep your personal data for as long as necessary to provide the service and to comply with legal obligations. When data is no longer needed, we delete or anonymise it. Wedding content is retained according to your active package and any archive storage subscription.

Your rights

Under the GDPR and applicable Swedish data protection law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data in certain circumstances;
• request restriction of processing;
• request data portability;
• object to processing based on legitimate interests or direct marketing;
• withdraw consent at any time; and
• complain to the Swedish Authority for Privacy Protection (IMY).

To exercise your rights, contact us through the support channels in your account. We typically respond within one month.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews.

Cookies

We use essential cookies to make the service work and analytics cookies to understand usage. You can manage cookie preferences through your browser settings or any cookie banner we provide.

Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated by email or within the service.

Contact

For privacy questions or to exercise your rights, contact us through the support channels in your account.