Privacy Policy

Last updated: 28 October 2026

Wedding Website Co provides an online platform that enables couples to create, manage and publish wedding websites and use related wedding planning tools and services.

Wedding Website Co is operated by Charis Events Pty Ltd ABN 25 701 994 505 (we, us or our). This Privacy Policy describes how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where they apply. “Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you use Wedding Website Co, visit a wedding website hosted through our platform, communicate with us, or otherwise interact with our services.

1. Information we collect

The information we collect depends on how you interact with Wedding Website Co.

Account and contact information

When you create or use an account, we may collect information such as your name, email address, authentication information and account preferences.

Wedding and website information

When creating or managing a wedding website, you may provide information including:

  • names of the couple;
  • wedding date and event details;
  • venue and location information;
  • schedules;
  • wedding stories and other written content;
  • photographs, videos and other media;
  • registry or gift information;
  • livestream information; and
  • other information you choose to publish or manage through your wedding website.

Some of this information may be publicly accessible where you choose to publish your wedding website.

Guest and RSVP information

Couples may provide information about their guests, and guests may provide information when interacting with a wedding website or RSVP form.

This may include names, email addresses, party or household information, attendance responses, meal selections, dietary requirements, accessibility information and other information submitted through RSVP or guest-management features.

“Sensitive information” includes health information and certain other information given additional protection under privacy law. We will collect sensitive information only with the individual's consent, where reasonably necessary for our functions or activities, or where otherwise permitted by law. Guests should not be required to provide more sensitive information than is reasonably necessary to respond to an RSVP or accessibility request.

Couples should only request and provide information that is reasonably necessary for organising their wedding.

Payment and transaction information

Where you purchase a paid Wedding Website Co plan or feature, payments are processed by our payment service provider.

We may receive transaction information such as payment status, transaction identifiers, amount, currency and information necessary to administer your purchase. We do not need to store your complete payment-card details where those details are processed directly by our payment provider.

Gift and registry information

Where Wedding Website Co provides registry or gift-related functionality, we may process information necessary to display or facilitate those features.

Unless expressly stated otherwise, Wedding Website Co does not act as a bank, financial institution or custodian of funds gifted between guests and couples. Third-party payment or financial services may be subject to their own terms and privacy policies.

Communications and support

If you contact us, report a problem or provide feedback, we may collect your contact details and the contents of your communication, together with information reasonably necessary to investigate or respond.

Technical and usage information

When you use our services, we may automatically receive technical information such as IP address, browser and device information, pages or features accessed, timestamps, diagnostic information, security events and similar information used to operate, secure and improve the service.

If we are unable to collect information required to create an account, process a purchase or provide a selected feature, we may be unable to provide the relevant account, purchase or feature.

2. How we collect personal information

We may collect personal information:

  • directly from you;
  • from a couple who adds guest or wedding information to the platform;
  • from guests who interact with a wedding website;
  • automatically through cookies, logs and similar technologies when you access our services or a wedding website;
  • from service providers involved in providing our services; and
  • where permitted by law, from other sources relevant to operating, securing or supporting Wedding Website Co.

Where it is lawful and reasonable to do so, individuals may interact with public wedding websites without identifying themselves. Account creation, purchases, RSVP functions and certain other features require identifying information.

If you provide us with personal information about another person, you should ensure that you are authorised to provide that information and that the person is appropriately informed where required.

3. How we use personal information

We may use personal information to:

  • create and administer accounts;
  • provide, operate and host wedding websites;
  • provide RSVP, guest-management, planning, registry, stationery, design and related features;
  • process purchases and administer plans;
  • send transactional, account, invitation, RSVP and service-related communications;
  • provide customer support;
  • maintain the security and integrity of the platform;
  • detect, investigate and prevent misuse, fraud and technical problems;
  • troubleshoot and improve the performance and reliability of our services;
  • develop and improve Wedding Website Co and its features;
  • comply with legal obligations and enforce our rights; and
  • otherwise perform purposes disclosed when the information is collected or with your consent.

We do not sell personal information to third parties.

We may send direct marketing communications where permitted by law. You may unsubscribe using the link in the communication or by contacting us. Unsubscribing from marketing will not prevent necessary service, security or transactional communications.

We will not use or disclose personal information for a purpose unrelated to the purpose of collection unless you have consented or the use or disclosure is otherwise permitted by law.

4. AI-powered features

Wedding Website Co may provide AI-powered features, including tools that assist with wedding planning, design, content generation or related tasks. These features may be provided with the assistance of third-party AI service providers.

Information that you submit to an AI-powered feature may be processed by Wedding Website Co and service providers that help us provide that feature. We will disclose, before information is submitted, that an external AI provider will process it.

You should not submit sensitive information, confidential information or information about another person to an AI-powered feature unless that person has consented or the submission is otherwise permitted by law.

We will not permit an AI service provider to use identifiable wedding or guest content to train general-purpose AI models unless this has been clearly disclosed and any consent required by law has been obtained.

AI-generated content may contain errors or unsuitable suggestions. You remain responsible for reviewing AI-generated content before relying on, publishing or using it.

Our AI features are intended to assist users with wedding planning and creative tasks. They are not intended to make decisions that significantly affect an individual's legal rights or interests.

5. How we disclose personal information

We may disclose personal information where reasonably necessary to service providers that assist us with functions such as:

  • website and application hosting (Vercel);
  • database and file storage (Supabase);
  • authentication (Supabase);
  • email delivery (Resend);
  • payment processing (Stripe);
  • AI-powered functionality (OpenAI and/or Anthropic, depending on current configuration);
  • product analytics, to help us understand how our own service is used and improve it (PostHog — see section 11);
  • security, monitoring and error reporting (Sentry — see section 11); and
  • other technical infrastructure required to operate Wedding Website Co.

We may also disclose information:

  • at your direction;
  • where a feature requires interaction with a third-party service;
  • to professional advisers, insurers, regulators, law enforcement bodies and courts where permitted by law and subject to appropriate confidentiality protections;
  • in connection with an actual or proposed sale, merger, restructuring or transfer of our business, subject to applicable law and appropriate confidentiality protections;
  • where required or authorised by law; or
  • where reasonably necessary to investigate unlawful activity or protect the security, rights or safety of users, Wedding Website Co or others.

Service providers may only receive the information reasonably necessary for the services they provide to us.

6. Public wedding websites

Wedding websites are designed to be shared with guests and may contain information chosen by the couple.

Depending on the settings and features used, information published on a wedding website may be accessible to anyone who has access to the website or its URL.

Privacy controls and link-based access reduce, but do not eliminate, the risk of unauthorised access. Account holders should obtain appropriate permission before publishing personal information or images concerning another person.

Couples are responsible for considering what information they choose to publish, including personal information relating to themselves, guests, venues or other people.

7. Overseas processing and disclosure

Some of the service providers we use operate infrastructure or personnel outside Australia. As a result, personal information may be processed, stored or disclosed outside Australia.

The countries involved may vary depending on the provider, infrastructure and service being used.

Where required by Australian privacy law, we will take reasonable steps to ensure that an overseas recipient handles personal information consistently with the Australian Privacy Principles. In some circumstances, we may remain accountable for an overseas recipient's handling of personal information.

8. Security

We use reasonable technical and organisational measures designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These measures may include access controls, authentication controls, encryption where appropriate, monitoring, backups and restrictions on staff and service-provider access.

However, no internet service or electronic storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should notify us promptly if you believe your account has been compromised.

If a data breach occurs that is required to be notified, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

9. Hosting, retention and deletion

The period for which a wedding website remains publicly hosted depends on the applicable plan and any hosting extension purchased.

At present, the included public hosting periods are:

  • Free — 3 months;
  • Plus — 12 months; and
  • Signature — 24 months,

measured from the applicable hosting recognised date for the wedding. The applicable hosting recognised date is the couple's wedding date as entered at the time the wedding website is first made publicly visible. Where the wedding date is subsequently changed, the recognised date is recalculated from the updated wedding date, subject to a cap of 18 months after the original wedding date at first publication.

Where available, a hosting extension may be purchased as a one-time purchase that adds 12 months of public hosting. It is not a subscription and does not automatically renew.

When the applicable public hosting period expires, the wedding website will cease to be publicly available in accordance with the service's hosting rules.

Expiry of public hosting does not itself automatically delete the user's workspace or data. Wedding Website Co currently retains the workspace and associated data for 12 months following hosting expiry so that the service can support account administration and, where available, hosting extensions or restoration.

We may also retain personal information for longer where reasonably necessary to comply with legal obligations, resolve disputes, maintain security, prevent fraud or enforce our agreements. Different retention periods may apply to transaction records, security logs, backups and records required by law. Information in backups will be isolated from ordinary use and deleted or overwritten in accordance with our backup cycle, unless retention is required by law.

Where personal information is no longer required and applicable requirements permit, it will be deleted or de-identified.

You may contact us to request deletion of your account or personal information. Some information may need to be retained where required or permitted by law or for legitimate operational purposes.

10. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before responding.

We will respond to a request within a reasonable period. We will not charge for making a request, although we may charge a reasonable cost for providing access where permitted by law and notified in advance.

If we refuse access or correction, we will provide written reasons and information about available complaint mechanisms, except where it would be unreasonable or unlawful to do so. If we decline to correct information, you may request that we associate a statement with the information indicating that you consider it inaccurate, out-of-date, incomplete, irrelevant or misleading.

11. Analytics, error monitoring and browser storage

Authentication

Supabase sets session cookies that are necessary to keep you signed in. These are functional and not used for tracking or advertising.

Registry reservations

When a guest makes a gift reservation or records a cash fund pledge on a couple's wedding website, a secure reservation management token is stored in the guest's browser storage. This token allows the guest to cancel or update their reservation without creating an account.

The reservation management token is not used for advertising or visitor profiling. The reservation itself is stored securely on Wedding Website Co's servers. Clearing browser storage or switching to a different device will remove access to self-service reservation management for that reservation, but the reservation will remain recorded and can be managed by contacting the couple directly.

Product analytics (PostHog)

Wedding Website Co uses PostHog to measure how our service is used and to improve it. PostHog is used solely for our own product analytics — not for advertising.

For visitors who have not created an account, PostHog assigns a temporary, session-only identifier held in browser memory. No cookie and no persistent browser storage entry is written for anonymous visitors. That identifier is discarded when you leave or close the page.

For authenticated account holders, your account identifier (an opaque random UUID, never your email address or name) is used to associate product usage events with your account within and across sessions. PostHog does not receive your name, email address, wedding details, guest information or any free-text content from our service. Couples' public wedding websites are excluded from analytics entirely.

PostHog is hosted in the United States. Its privacy policy is available at posthog.com/privacy.

Error monitoring and session replay (Sentry)

Wedding Website Co uses Sentry to capture error reports and diagnose technical problems. When an unhandled error occurs in your browser while using our service, Sentry may capture a replay of your session to help us diagnose the issue.

All visible text in session replays is masked before being sent to Sentry. Media content is blocked. Session replays are not captured for visitors to couples' public wedding websites.

Sentry is hosted in the United States. Its privacy policy is available at sentry.io/privacy.

Performance and analytics technologies

We may also use analytics or performance technologies to understand how our service is used and to improve its operation.

No advertising trackers

Wedding Website Co does not use advertising cookies, cross-site tracking pixels, remarketing scripts or advertising identifiers of any kind.

12. Children's privacy

Accounts may only be created by individuals aged 18 years or older. Wedding Website Co is not directed to children.

Wedding websites and guest lists may contain information relating to children where that information is provided by a couple or guest. Where information about a child is provided, the account holder must have the consent of the child's parent or legal guardian where required by law.

Users should minimise the information published about children and should not publish sensitive, location or contact information concerning a child unless reasonably necessary and appropriately authorised.

13. Privacy complaints

If you have a question or complaint about how we handle personal information, please contact us using the contact method made available through Wedding Website Co.

We will consider privacy complaints and requests and respond within a reasonable period.

If you are not satisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, practices or legal obligations. The current version will be published on our website with its updated date.

We will update the “Last updated” date and, where practicable, notify account holders of material changes affecting how their personal information is handled. If consent is required for a new use or disclosure, we will seek that consent.

15. Contact us

You can contact Wedding Website Co at hello@weddingwebsiteco.com or using the contact details made available through our website.