UNVEILED

Privacy Policy

Effective July 1, 2026

We take privacy seriously — not as a legal formality, but because you trust us with personal information about one of the most important events of your life. The short version: we do not sell your personal information, and we do not share it with venues or vendors.

Information we collect

When you create an account and plan with Unveiled, we collect:

  • Account information — your name, email address, and password (stored only as a cryptographic hash), or your Google account email if you sign in with Google.
  • Wedding details you choose to add — partner name, wedding date, city, guest count, and budget, used to power your planning dashboard.
  • Planning data you create— saved vendors, budget items, checklist entries, your guest list (names and, if you add them, guests' email addresses), invitations you design, and the RSVP responses your guests submit.
  • Technical basics — IP address and browser information in standard server logs, used for security (like rate limiting and account-lockout protection) and debugging.

Cookies

We use only essential cookies: they keep you signed in and protect your account against cross-site request forgery. We do not use advertising cookies or third-party tracking pixels.

How we use your information

  • To provide the planning tools you signed up for.
  • To send the emails you ask us to send — like your guests' invitations and RSVPs, email verification, and password resets.
  • To keep the platform secure and prevent abuse.
  • To answer when you contact us.

What we do not do

  • We do not sell your personal information. To anyone. Ever.
  • We do not share your identity, contact information, budget, or planning data with venues or vendors. Vendors never learn who saved, compared, or passed on them.
  • We do not run third-party advertising or tracking on the site.

Your guests' information

Guest names, email addresses, and RSVP responses exist solely so your invitations and RSVP tracking work. They are visible to you, used to deliver the invitations you send, and nothing else. We do not market to your guests.

Service providers

Like every website, we rely on infrastructure providers to operate: cloud hosting and file storage (Amazon Web Services), email delivery services for the messages described above, and Google for optional sign-in. These providers process data only to provide their service to us.

Security

Traffic is encrypted in transit (HTTPS). Passwords are stored only as bcrypt hashes. Sessions use httpOnly cookies that page scripts cannot read, with additional protections against forged requests. No system is perfectly secure, but security has been a first-class concern in how Unveiled is built.

Data retention & deletion

Your data stays in your account for as long as you keep the account. To delete your account and its data, email hello@unveiledvenue.com from your account email address and we will take care of it.

Children

Unveiled is intended for adults planning a wedding and is not directed at children under 16.

Changes to this policy

If we make material changes, we will update the effective date above and note the change prominently on the site.

Questions

Email hello@unveiledvenue.com or use our contact page.