HomeFeaturesPricingContactLogin

Privacy Policy

This Privacy Policy explains how we process personal data in connection with YesToYou.

YesToYou is a wedding platform focused on the European market. Depending on the context, the platform acts either as controller or, for certain guest-related wedding data, as a processor or service provider on behalf of the couple using the platform.

1. Who Is Responsible For The Processing?

Apporix S.à r.l.-S acts as controller for website operations, account creation and login, security, abuse prevention, infrastructure, and general service administration.

For guest and RSVP data that a couple adds to or collects through its wedding page, Apporix acts, to the extent applicable, as a service provider or processor on behalf of that couple. In those cases, the couple remains responsible for the underlying guest relationship and for ensuring that they are allowed to provide the relevant guest data to the platform.

Responsible entity:

Apporix S.à r.l.-S

contact@apporix.lu

23 Kriibsebaach L-6185 Gonderange, Luxembourg

RCS: B231035

2. What Data We Process

  • Website and contact data, including your name, email address, and message when you contact us via the contact form.
  • Account and authentication data, including your email address, login requests, one-time-password verification events, and session information.
  • Wedding setup data, including names, wedding date, event locations, timeline entries, contact persons, hotels, design choices, welcome messages, and similar content entered by the account holder.
  • Guest and RSVP data, including family name, attendee names, email address, attendance status, meal choices, allergens, optional message to the couple, and verification status.
  • Technical and security data, including IP-derived identifiers, request metadata, idempotency records, rate-limit events, and operational logs needed to protect and run the service.
  • Browser-side storage data, including essential session cookies and limited local storage entries used to support RSVP flows and sign-in related functionality.

3. Why We Process Personal Data

  • To provide and host the YesToYou website and wedding web app.
  • To create and manage user accounts and sign users in securely by email code.
  • To enable couples to build, publish, and manage wedding pages.
  • To collect, verify, update, and display RSVP responses for the relevant wedding.
  • To send transactional emails such as login codes and RSVP verification emails.
  • To respond to contact requests and other service inquiries.
  • To maintain service security, prevent spam and abuse, and ensure reliable request processing.
  • To provide product features such as place suggestions, route calculations, weather information, and map-related displays.

4. Legal Bases

  • Performance of a contract or steps prior to entering into a contract, where processing is necessary to provide the service, manage accounts, and operate wedding pages and RSVP workflows.
  • Legitimate interests, where processing is necessary for security, fraud prevention, abuse detection, technical diagnostics, service stability, and defending legal claims.
  • Where applicable, compliance with legal obligations.

5. Recipients Of Personal Data

We keep recipients limited to those needed to operate the service. Depending on the feature used, personal data may be processed by the following categories of recipients:

  • Vercel, for hosting and infrastructure.
  • Supabase, for database, authentication, and storage services.
  • Resend, for login and RSVP transactional emails.
  • Our SMTP email delivery provider, for contact-form message delivery.
  • Google Places API and Google Routes API, for place suggestions and route calculations.
  • Open-Meteo, for weather information.
  • OpenStreetMap and map-tile providers used to render map views within the product.

6. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area.

Where relevant, we rely on appropriate safeguards such as adequacy decisions, including the EU-U.S. Data Privacy Framework where applicable, or contractual and organizational safeguards. For Supabase, we have put in place a data processing agreement and transfer impact assessment according to our operational setup.

7. Retention

  • Contact-form messages are typically retained for up to 24 months after the last relevant correspondence unless a longer retention period is necessary for follow-up or legal reasons.
  • Account-related data is generally retained for as long as the account remains active and for a limited period thereafter where needed for security, backups, or legal compliance.
  • Wedding content and RSVP data are generally retained for the duration of the account and for a limited post-deletion period to allow recovery from backups, resolve disputes, or comply with legal obligations.
  • Security logs, idempotency records, and rate-limit records are typically retained only for a short period proportionate to operational and security needs.

8. Cookies And Similar Technologies

YesToYou does not currently use analytics, advertising, or marketing tracking tools.

We use only essential cookies and similar technologies required for core functionality, especially for authentication and session management. We also use limited local browser storage for certain RSVP and sign-in related user-experience features.

9. Your Rights

Under the GDPR, you may have the right to request access, rectification, erasure, restriction, portability, or objection, depending on the specific processing activity and your role in relation to the data.

You may also lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD). If you want to exercise your rights, you can contact us at contact@apporix.lu.

10. Data Provided By Couples

Couples using YesToYou must only upload or collect guest and contact-person data that they are allowed to use for their wedding communications and organization.

If you are a guest and have questions about why your data appears on a particular wedding page or RSVP workflow, the relevant couple is usually your first point of contact for the underlying wedding communication, while Apporix can still be contacted about platform-level privacy questions.

11. Contact

If you have privacy questions, please contact Apporix at contact@apporix.lu.