Privacy policy

Plain Labs LLC operates onour.day and is responsible for the personal information we use to run accounts, support, and the service. Contact [email protected] for privacy questions or requests.

Wedding organizers decide whom to invite, what questions to ask, and how to use responses for their wedding. We store and process that wedding information to provide the service to them. Guests can contact their organizer about a response or contact us for help with a privacy request.

• Account details, including email address, name, sign-in verification records, sessions, and wedding administration permissions.
• Wedding details supplied by organizers, including names, dates, venues, schedules, contact and recovery information, invitation wording, and uploaded photos.
• Guest information supplied by organizers, including through CSV imports: names, household membership, email addresses, phone numbers, language, group labels, and whether a guest is a child.
• RSVP drafts and submitted answers, attendance, plus-one details, meal choices, and answers to questions the organizers include. Answers may contain allergies, dietary needs, or other sensitive information.
• Invitation-open and response activity, edit history, and technical information such as IP address, browser information, request timestamps, and error logs used to operate and secure the service.
• Payment references and status, checkout associations, and refund or dispute records. Dodo collects card and billing details directly; we do not receive or store your full card number or security code.

You do not need an onour.day account to RSVP. Your organizer may already have supplied your name and contact details before you open an invitation.

We use information to verify sign-ins, save and publish invitations, show the correct household's questions, collect responses, provide organizer exports, confirm purchases, resolve support requests, and prevent unauthorized access.

Where data protection law requires a legal basis, we rely on providing our contract with account holders, legitimate interests in operating and securing the service, and legal obligations for payment or legal records. Where consent is required for a particular use, that use must have the required consent.

Organizers are responsible for having a lawful basis to provide guest data and obtain any required consent for sensitive answers. Share only the dietary or accessibility information needed for the event. Contact your organizer for an alternative way to provide it.

Authorized wedding organizers can view guest lists, drafts, submitted responses, and response history, and can export that information. People with the same household invitation link can access that household's invitation and responses. Treat the link as private.

If organizers enable the public find-your-name page, guests can find their household through that page. Published invitation details and photos are available to the people who can access the invitation. Organizers control whether public lookup is enabled.

We do not sell personal information or use wedding responses for advertising. We may disclose information to comply with law, protect people and the service, or complete a business transfer subject to appropriate data protections.

• Railway hosts the application, database, and uploaded photos.
• Resend receives email addresses and verification messages to deliver sign-in and account-verification codes.
• Dodo Payments acts as merchant of record and authorized reseller. We send the purchaser's name, email address, and purchase identifiers to create checkout. Dodo also processes billing, tax, fraud, refund, and dispute information under its own Privacy policy.
• When automatic translation is configured, OpenAI receives invitation wording, schedule descriptions, and question wording for translation. Those texts can contain personal information the organizer has entered. Guest lists and RSVP answers are not part of the translation request. Without automatic translation configured, the wording is edited manually.

We limit provider access to the services they perform. Payment providers may also have their own legal obligations and purposes.

We use essential cookies for sign-in and remembering the wedding you are managing. Sign-in sessions can last up to 30 days; the selected-wedding preference can last up to one year. You can clear cookies in your browser, which may sign you out.

We do not use advertising cookies or third-party marketing analytics in the app. Dodo's hosted checkout may use its own cookies and safeguards, described in its privacy policy.

We use access checks, restricted invitation links, and hashed sign-in codes to protect information. No online service can guarantee perfect security. Tell us promptly if a private link or account may have been exposed.

Wedding content, guest information, and response history remain available until the wedding is deleted; they do not automatically expire after the wedding date. Archiving a guest or closing RSVP is not permanent deletion.

Organizers can export their wedding data and permanently delete the wedding in Settings. To delete an account, first leave or delete every wedding it belongs to, then use the account deletion control. Deleting one organizer's account does not delete a wedding still managed by others.

We retain support, security, and payment records only as needed for their purpose, disputes, and legal obligations. Deleted information may remain in backups until those backups are replaced, and Dodo may retain transaction records under its own obligations. We do not promise immediate erasure from every backup or provider record.

Our hosting, email, payment, and translation providers may process information outside your country, including outside the European Economic Area or United Kingdom. Where applicable law requires transfer safeguards, we use the relevant contractual or other recognized safeguards. Contact us for information about a transfer affecting your data.

Depending on your location, you may have rights to access, correct, delete, or receive a portable copy of your information, restrict processing, object to processing based on legitimate interests, and withdraw consent where consent is the basis. Withdrawal does not change the lawfulness of earlier processing.

Email [email protected] with your request. We may need to verify your identity and identify the relevant wedding before disclosing or changing personal information. Guests may also ask their organizer to correct or remove information.

You may complain to your local data protection authority. These rights can be subject to legal exceptions, including information we must retain to comply with law or resolve a dispute.

Organizer accounts are for adults. Organizers or responsible adults may provide limited information about children attending a wedding, such as a name and meal choice. Please do not provide unnecessary information about a child, and contact us if you believe it was supplied without appropriate permission.

We will update the effective date when this policy changes and give notice of material changes through the service or by email where appropriate. Privacy questions can be sent to [email protected].