Privacy Policy

UriVow ("we," "us," or "our") operates an AI-powered wedding planning platform at urivow.com (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our Service, and the obligations that apply when wedding planners and couples ("Users") use UriVow to communicate with their wedding guests.

Platform roles:UriVow serves two types of registered users — wedding planners and couples (together, "Users") — and their wedding guests ("Guests"), whose information is processed on behalf of Users. This policy covers all three groups.

Note: This policy is provided for informational purposes. We recommend consulting a qualified attorney to ensure your specific use of UriVow complies with applicable laws, particularly regarding SMS communications and data privacy.

1. Information We Collect

Account Information

When you create a UriVow account we collect your name, email address, role (wedding planner or couple), and optionally your phone number, business name, and profile photo. If you sign in through a social provider (Google, Microsoft, or Facebook), we receive the name, email, and profile photo that provider shares with us based on your consent to that provider's permissions.

Wedding Portfolio Data

We collect information you enter to build your wedding portfolio, including wedding names, dates, venues, total budget, vendor lists (names, categories, contact details, contract uploads, pricing), task lists, budget line items, seating arrangements, day-of itinerary items, RSVP website content (text, photos, settings), inspiration board images, and messages exchanged between wedding team members.

Guest Information

Users may add guest records containing first and last name, email address, phone number, mailing address, meal preferences, dietary restrictions, RSVP status, table assignment, and other details relevant to wedding planning. This information is entered by Users on behalf of their guests or submitted by guests themselves through the RSVP website.

Contact Imports

If you choose to import contacts from Google Contacts, Outlook, Apple Contacts, or via CSV file upload, we temporarily process those contact records (names, emails, phone numbers) to populate your guest list. We do not retain contact data that is not added to your guest list.

AI Conversation Data

When you interact with Uri AI (our AI assistant), we process your messages and relevant wedding context (guest counts, budget, tasks, vendors, schedule) to generate responses. These conversations are stored to maintain context between sessions within your wedding portfolio.

Usage and Technical Data

We collect standard web usage data including pages visited, features used, and timestamps. We use Supabase's authentication infrastructure which processes IP addresses and session tokens as part of secure authentication. We do not use third-party advertising trackers or sell behavioral data.

3. How We Use Your Information

• Providing the Service: Operating your wedding portfolio, enabling collaboration between planners and couples, processing RSVPs, and powering Uri AI features.
• Communications: Sending RSVP invitations and event updates to guests (email via Resend and SMS via Twilio) on behalf of the wedding couple, and sending account-related emails to registered Users (login codes, beta access notifications, admin alerts).
• AI features: Sending your messages and wedding context to Anthropic (Claude) to generate Uri AI responses. Image generation prompts are sent to OpenAI (DALL-E). Venue and vendor lookups use the Google Places API.
• Improving the Service: Understanding how features are used to prioritize improvements. We do not sell behavioral data or use it for advertising.
• Legal compliance: Complying with applicable laws, responding to lawful requests, and protecting our rights and those of our users.

4. Information Sharing and Disclosure

We do not sell your personal information. We share data only as necessary to operate the Service with the following categories of service providers:

We may disclose information if required by law, court order, or government request, or to protect the safety, rights, or property of UriVow, our users, or others.

5. Data Security

We implement technical and organizational security measures including:

• Row-level security (RLS) in our database, so each user can only access their own data
• Encryption in transit (TLS/HTTPS) for all data transfers
• Encryption at rest for database storage via Supabase
• Service-role API keys restricted to server-side code; never exposed to browsers
• Authentication via magic link OTP codes or OAuth with session tokens
• Beta-period allowlist restricting access to invited testers

No system is completely secure. We cannot guarantee the absolute security of your information and are not responsible for unauthorized access resulting from circumstances beyond our reasonable control.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention practices:

• Account deletion: When you delete your account, your profile, all wedding portfolios, guest records, and associated data are permanently deleted. This action is irreversible and takes effect immediately.
• Guest records: Retained as long as the wedding portfolio exists.
• AI conversations: Retained within your portfolio to maintain context; deleted when the portfolio is deleted.
• SMS consent records: Retained for the duration of the wedding portfolio and for a reasonable period thereafter as required by applicable law.
• Imported contacts: Contact data not added to a guest list is not retained beyond the import session.

7. Your Rights and Choices

• Access and correction: You can view and edit your profile information in Account Settings at any time.
• Data deletion: You may delete your account from Account Settings → Delete account. Guest records can be deleted individually from the Guests page.
• SMS opt-out (guests): Reply STOP to any message to opt out of further SMS communications from that wedding. Alternatively, contact the couple or email privacy@urivow.com.
• Data portability: You may export your guest list as a CSV file from the Guests page at any time.
• California residents (CCPA/CPRA): You have the right to know what personal information we collect, to delete it, and to opt out of its sale. We do not sell personal information. Contact privacy@urivow.com to exercise these rights.
• European residents (GDPR): You may have rights to access, rectify, erase, restrict, or object to processing of your data. Contact privacy@urivow.com to exercise these rights.

8. Children's Privacy

UriVow is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at privacy@urivow.com and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 14 days before taking effect. Continued use of the Service after updates constitutes acceptance of the revised policy. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact Us

For privacy-related questions, data requests, or SMS opt-out assistance, contact us at: