Privacy notice

Data controller

Kuvert is the data controller for the personal data processed in the service.

This notice explains which personal data we process, why, for how long, who gets to see it, and what rights you have. It is written about the program as it actually is today.

Which data we process

• Account: name, email address and which wedding you are part of. If you sign in with Google, we receive your name and email address from there.
• The content you enter: guests with names and contact details, groups, the seating chart, the run sheet, the budget, gifts, travel and accommodation, and the text and images on the guest site.
• Dietary considerations and allergies, where you record them — see the section below on health data.
• Photographs guests upload through the disposable camera, if you switch it on.
• Technical information: IP address, browser type and timestamps in security and debugging logs.
• Payment: name, email address and subscription status. Card details go straight to Stripe and never pass through us.

We do not buy personal data, and we do not obtain it from any source other than you and the sign-in provider you choose.

Why, and on what legal basis

• To deliver the service you have ordered — the contract, GDPR article 6 (1) b.
• To keep the service safe and running, and to detect misuse — legitimate interest, article 6 (1) f.
• To meet obligations we have under the law, such as retaining accounting records — article 6 (1) c.
• For notifications you have switched on yourself — you control these under Settings and can switch off each one or all of them.

We do not use the data for automated decisions with legal effect for anybody, and we do not profile anyone.

Your guests' data: you decide, we process

The data you record about your guests is data you are the controller for. We process it on your instructions, in accordance with this notice, and we do not use it for any purpose of our own.

If you need a data processing agreement on paper for this, you can have one — get in touch.

Who else sees the data

We sell nothing to anybody. To make the service work we use a few subprocessors, and they receive only what they need:

• Neon — the database, where all the content lives.
• Amazon Web Services (S3) — images and files you upload.
• Resend — sending email, such as sign-in links, invitations and notifications.
• Stripe — payment and subscriptions, including all card handling.
• Google, Apple and Facebook — only if you choose to sign in with them, and only your name and email address.
• Anthropic — the model behind “Ask Kuvert”, see below.

We use no analytics tools, no tracking pixels and no advertising networks. There is no third party following you around these pages.

Transfers outside the EEA

We use European regions where the provider offers them. Some of the providers above are American, and for those the transfer takes place under the European Commission's Standard Contractual Clauses (SCC), with whatever supplementary measures the provider documents. If you want to know where a particular piece of data sits, ask us.

How long we keep it

• The content of the wedding: until you delete it, or until you ask us to delete the account.
• If you delete the wedding, the content is gone immediately. Backups rotate, and a deleted item may sit in a copy for up to 30 days before it is out of there too.
• Security and debugging logs: up to 90 days.
• Accounting records for payments: as long as the Norwegian Bookkeeping Act requires, currently five years.

Your rights

You have the right to see the data we hold about you, to have what is wrong corrected, to have deleted what we have no reason to keep, to take your data with you, and to object to processing we carry out on the basis of legitimate interest.

If you are a guest at somebody's wedding and want to know what is recorded about you, it is the couple who keep the list — get in touch with them. If that does not get you anywhere, you can contact us and we will help you reach them.

If you believe we are processing data about you in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet). We would appreciate hearing it first, but that is not a precondition.

Cookies

We use only the cookies the service needs in order to work, which is why we do not ask for consent to them — there are none to consent to.

• Sign-in: keeps you signed in between page views.
• Language: remembers which language a guest is reading the guest site in.
• Appearance: remembers light or dark theme, and how wide your menu is.

None of them follows you to other websites, and none of them is there for marketing.

Security

All traffic is encrypted over HTTPS, and the database and the files are encrypted at rest. Access to production data is limited to those who need it to run the service. Every wedding is separated from the others in every query, and that is covered by automated tests of its own precisely because it is the mistake that is easiest not to notice.

If a breach occurs that carries a risk to you, we notify the Datatilsynet within 72 hours and you as quickly as we can.

Changes

If we change this notice, we update the date at the top. If the change matters, we say so in the program or by email before it applies.

Questions about this page can be sent to hei@kuvert.no, and we answer as quickly as we can.