Privacy Policy

Individual Entrepreneur Roman Barabanov, registered in Georgia, is the data controller for personal data processed through Wedding Arrivals. You can contact us at support@weddingarrivals.com.

For media that guests upload to an Owner's event, the Owner decides what is collected and how the album is used; we process that media on the Owner's behalf to provide the Service. This policy explains our own processing and our role for both Owners and guests.

From Owners

• Account data: email address, name, and the identifier from your Google sign-in (we never receive your Google password).
• Event data: couple/event names, date, type, and the settings you choose.
• Purchase data: the plan you buy and a reference from our payment provider. We do not see or store full card details — those are handled by the payment provider.

From guests

• The photos, videos, and audio a guest uploads, plus basic file metadata (type, size, dimensions, duration).
• An optional display name, if the guest chooses to provide one.

Automatically

• Technical data needed to run the Service securely, such as IP address, browser/device type, and request logs.
• Essential cookies — see our Cookie Policy.

We use personal data to:

• provide the Service — create events, store originals, generate display versions, run the live slideshow, and build downloads;
• authenticate Owners and keep accounts secure;
• process purchases and fulfil plan entitlements through our payment provider;
• send service emails such as one-time sign-in codes;
• maintain, secure, and improve the Service and prevent abuse; and
• comply with our legal obligations.

Where the GDPR or similar law applies, our legal bases are: performance of our contract with you; your consent (for example an optional guest display name); our legitimate interests in operating and securing the Service; and compliance with legal obligations. See the GDPR page for your rights.

We do not sell personal data. We share it only with the providers that help us run the Service, under appropriate data-protection terms:

• Cloudflare — hosting, compute, database, and object storage. Original media and metadata are stored on Cloudflare (including R2, D1, Images, and Stream).
• Our payment provider (Merchant of Record) — to take payment and handle tax. It receives the data needed to complete your purchase.
• Resend — to deliver transactional emails such as sign-in codes.
• Google — when an Owner chooses Google sign-in, to authenticate the account.

The specific payment provider is named here once selected. We may also disclose data where required by law or to protect our rights, users, or the public.

Our providers may process data in countries outside your own, including outside the EU/EEA. Where personal data of EU/EEA or UK users is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

Event media is kept for the retention period of the Owner's plan and may be permanently deleted after it ends. Account data is kept while your account is active and for a reasonable period afterwards. We keep purchase and tax records for as long as the law requires. Backups are retained only briefly and then overwritten.

We use technical and organisational measures to protect personal data, including encryption in transit, access controls, and private-by-default albums. No system is perfectly secure, so we cannot guarantee absolute security — keep your own copy of important media.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Owners can delete an event and its media from the dashboard. To exercise any right, contact us at support@weddingarrivals.com. See the GDPR page for details and how to complain to a supervisory authority.

If you are a guest and want media you uploaded removed, contact the event Owner or us, and we will help facilitate the request.

The Service is not directed to children, and Owners must be adults. Photos of children may appear in event albums; the Owner is responsible for having any consent required to upload them.

We may update this policy and will revise the date below when we do. Questions or requests: support@weddingarrivals.com.

Controller: Individual Entrepreneur Roman Barabanov

Address: 3 Davit Gamrekeli Street, 0160 Tbilisi, Georgia

Email: support@weddingarrivals.com