How we handle your data.
Last updated: May 7, 2026
1. Who we are
The short version: SuperWeddingPlanner is run by a small Belgian company. This page explains what we do with your data — and what we don't.
SuperWeddingPlanner is a service of bv vdm ventures BV (a Belgian besloten vennootschap), with its registered seat at Bondgenotenlaan 138, 3000 Leuven, Belgium ("we", "us"). We act as the data controller for the personal data described below within the meaning of the EU General Data Protection Regulation (GDPR). For any privacy or data-protection question, email us at [email protected].
2. What we collect
Just what we need to plan a wedding with you — name, email, what you upload, and basic technical info to keep things running.
- Account data: name, email, password hash, or social-provider identifier if you signed in with Google, Facebook, Instagram, or TikTok.
- Wedding planning content: dates, locations, budgets, vendors, guests, mood-board prompts, uploaded inspiration images, and anything else you choose to add.
- Billing data: collected and processed by Stripe. We retain your Stripe customer id and a record of your subscription (plan, status, billing period) — we do not see card numbers.
- Technical data: IP address, browser, device, page views, and error reports.
3. Why we use it
To run the service you signed up for, to bill you, to email you when needed, and to keep things secure.
We process your data to provide and improve the service, to handle billing and tax compliance, to send transactional communications (verifications, partner invites, password resets, billing notices), to monitor service health and security, and to comply with our legal obligations.
4. Who else processes your data
A short list of trusted partners help us run the service. We use them only for what they need to do their job.
We rely on the following subprocessors. Each is bound by a data-processing agreement and only receives the data necessary for its purpose.
| Provider | Used for | Data shared |
|---|---|---|
| Google LLC Google Cloud (Belgium), Gemini, OAuth, Places, Analytics |
Hosting, AI features, sign-in, location search, analytics | Stored content, prompts, email, name, IP (anonymized for analytics) |
| Meta Platforms Ireland | Facebook & Instagram sign-in | Email, name, provider id |
| Stripe Payments Europe | Payments and subscriptions | Email, name, billing details |
| TikTok Information Technologies (EU) | TikTok sign-in | TikTok provider id, name |
| Mailgun (Sinch, EU region) | Transactional email | Email, name |
| Cloudflare | CDN, DNS, DDoS protection | Request metadata, IP |
| Functional Software (Sentry) | Error tracking | Stack traces, user id, browser info |
| Intercom | Customer support chat | Email, name, conversation content |
5. International transfers
Most of your data lives in the EU. The bits that don't are protected by EU-approved contracts.
The majority of your personal data is stored within the EU (Google Cloud Belgium, Stripe Ireland, Meta Ireland, TikTok EU entity, Mailgun EU region, Intercom Ireland). Where data is transferred to the United States — for example via Cloudflare's edge network, Sentry's error-tracking infrastructure, or Google's parent operations — those transfers are covered by Standard Contractual Clauses or the EU-US Data Privacy Framework, in line with GDPR Articles 44–49.
6. Cookies and similar technologies
We use only what we need to run the service — and we ask before setting anything optional.
We group cookies into three categories. Strictly necessary cookies (login session, CSRF token, consent record) are always set so the service can function. Analytics cookies (Google Analytics, configured with IP anonymization) and customer-support cookies (Intercom) are set only if you accept them in our cookie banner. You can change your preferences at any time via the banner trigger in the footer.
7. How long we keep your data
We keep what we need for as long as we need it. When you delete your account, your personal data goes — give or take a backup cycle.
We keep your account data and wedding content for as long as your account is active. When you delete your account, we permanently delete your personal data within thirty (30) days, with the following exceptions: (a) Stripe billing records and invoices are retained for seven (7) years to satisfy Belgian tax law (Code of Economic Law); (b) anonymized usage data may be retained indefinitely for service-improvement purposes.
8. Your rights under the GDPR
You can ask us what we have, fix it, or have it deleted. Email us and we'll handle it.
You have the right to access your personal data, correct or update it, request its deletion, restrict or object to its processing, request data portability, and withdraw any consent you have given. To exercise any of these rights, email [email protected].
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — [email protected].
9. AI-generated content
When our planning tools generate something for you — a mood board, a vendor suggestion — it's yours. We don't use what you give us to train AI models, and neither does our AI provider.
Some features of SuperWeddingPlanner are powered by Google's Gemini API. The content these tools generate (mood boards, vendor proposals, planning suggestions) belongs to you. Inputs you provide to these features are not used to train AI models — neither by us nor by Google, since the paid Gemini API does not use customer data for training under Google's commercial terms. AI-generated suggestions are starting points, not professional advice; always verify availability, pricing, and details directly with vendors before booking.
10. Security
We use sensible, industry-standard security. If something goes wrong, we'll tell you.
We protect your data with encryption in transit (HTTPS/TLS) and at rest, role-based access controls, and regular security review. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Belgian Data Protection Authority within 72 hours and inform affected users without undue delay, in line with GDPR Articles 33–34.
11. Children
SuperWeddingPlanner is for adults — you have to be 18 or older.
Our service is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact [email protected] and we will delete it.
12. Changes to this policy
If we make a meaningful change, we'll email you. The date at the top always reflects the latest version.
We may update this policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date above. Continued use of the service after changes take effect constitutes acceptance.
13. Contact
Questions, requests, complaints — write to [email protected].
SuperWeddingPlanner — bv vdm ventures BV
Bondgenotenlaan 138
3000 Leuven, Belgium
Email: [email protected]
This page is informational and not a substitute for legal advice.