Privacy Policy

This policy covers www.wishwoven.com and invitations served from invite.wishwoven.com, which WishWoven runs from India. It applies to people who make invitations (hosts) and to people who open them (guests).

• Your email address, used to sign you in with a one-time code. We don't store a password.
• Your name and your team's name and time zone, if you give them.
• What you put in an invitation: names, dates, places, text, photos, links and your guest list.
• Drafts you haven't saved to your account stay in your own browser and are not sent to us.

• What a guest sends in an RSVP: their name and their answers, and a phone number or email address only if the host's form asks for one.
• When an invitation is opened, so the host can see how many people opened it.
• A random ID kept in a cookie on the invitation page, so the page remembers that this browser has already replied.
• A scrambled form of the network address, used only to stop the same sender flooding an invitation with replies. We don't keep the address itself.

• To show the invitation to the people who have its link.
• To show RSVPs and open counts to the host and their team.
• To send sign-in codes and team invitations by email.
• To keep the service working and safe.

We don't sell personal information and we don't show advertising.

Anyone with an invitation's link can open it, so share links only with the people you mean to invite. Invitations are marked so that search engines don't list them. RSVP answers are visible to the host's team; a design may also show guests' names and messages on the invitation, but never phone numbers or email addresses.

We use a sign-in cookie to keep hosts signed in, and the reply cookie described above on invitation pages. We don't use advertising cookies.

We count visits to our website and app with Vercel Web Analytics. It uses no cookies and doesn't follow you across other sites. Invitation pages are not counted this way.

We also use PostHog to learn which designs people view, use and publish, and how many times an invitation is opened and answered, so we know what to improve. It uses no cookies, and we never send it names, email addresses, guest links or reply answers.

We use other companies to run WishWoven: Vercel for hosting and file storage, Neon for the database and Resend for email. They handle data only to provide those services to us.

An invitation may load fonts from Google Fonts and, if the host adds them, a YouTube video or a Google Maps link. Those services receive the usual technical details a browser sends, under their own privacy policies.

We keep your account, invitations and RSVPs until you delete them or ask us to. Write to us to delete your account and everything in it.

You can ask for a copy of your information, ask us to correct it or ask us to delete it. Guests can ask the host, or us, to remove an RSVP.

WishWoven is for people aged 18 or older. We don't knowingly collect information from children; if you think a child has given us theirs, write to us and we will delete it.

If this policy changes, we will update this page and the date at the top.