Legal
Privacy policy
Last updated 4 October 2026
This policy explains what personal information Soulful Ties (“Soulful Ties”, “we”, “us”) collects when you use our website and invitation service, why we collect it, and the choices you have. We have written it to be read, not skimmed past.
The short version
- We collect only what we need to run your invitation and your account.
- We never sell personal information, and we don't show advertising or use advertising trackers.
- The couple (the “host”) decides what their invitation asks guests for; we store those replies on the host's behalf.
- You can download or delete your data at any time from your account page.
Who is responsible for what
For account holders, we are responsible for your account information. For guests who reply to an invitation, the host who created the invitation decides what to collect and how to use it; we process those replies on the host's instructions to provide the service. Guests with questions about a specific wedding should contact the hosts first — we will also help if you contact us.
What we collect
| Information | From | Why |
|---|---|---|
| Name, email address and a securely hashed password | Hosts, when creating an account | To create and secure your account, and to contact you about it |
| Invitation content: names, family names, dates, venues, photos, story text | Hosts | To display your invitation to the people you share it with |
| RSVP replies: name, attendance, number of guests, email or phone if the host asks for them, dietary needs, messages and answers to the host's questions | Guests | To pass your reply to the hosts |
| Guest-list entries (name, phone or email, party size) | Hosts | To create personal invitation links |
| Wishes and messages | Guests | To show them on the invitation's wishes wall |
| Photos guests choose to share (up to five each), with the name and caption they add. To count each guest's five, we keep a one-way hash of a random key stored on their device — never their IP address | Guests | To show them in the invitation's “Shared moments” gallery and let the hosts keep them |
| Plan and payment records (plan, amount, dates, status). Card details are handled by our payment provider and never reach our servers | Hosts | To provide the plan you pay for and keep accounting records |
| Food preferences guests choose to share (how many in their party are vegetarian, favourite dishes) and the table they are seated at | Guests, via RSVP; hosts | So the couple can plan catering and seating, and email each guest their table |
| Messages sent through our contact form | Anyone | To reply to you |
| Basic technical data: IP address and browser type, kept briefly for security (e.g. rate limiting) and error logs | Automatically | To keep the service secure and working |
Cookies
We use one essential cookie to keep you signed in. Invitations may store a small note in your browser so you can change your RSVP later. We do not use analytics, advertising or tracking cookies, so there's no cookie banner to click through.
Services we rely on
We use a small number of trusted providers, each only for its specific job:
- Cloudflare — hosting the website and our database, including invitations, replies and photos.
- Stripe — processing card payments, when enabled.
- Resend — sending account and RSVP notification emails, when enabled.
- Google Fonts and Google Maps — fonts on invitation pages, and maps when a host chooses to show one. Your browser contacts Google directly to load these.
These providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep information
- Invitations, replies, guest photos and all related data are automatically and permanently deleted 30 days after your plan ends, unless you buy another plan before then. You can also delete anything yourself at any time.
- During those 30 days your information stays confidential: it is not accessed by anyone, not shared, not sold and not used for any other purpose — it simply waits in case you renew, and is then erased automatically.
- Payment records are kept for as long as tax and accounting laws require (usually up to 7 years), even if the account is deleted.
- Contact-form messages are kept for up to 2 years, then deleted.
- Security logs are kept for a short period, typically no more than 30 days.
How we protect it
Connections are encrypted (HTTPS). Passwords are stored only as strong one-way hashes. Session cookies are protected against theft by scripts and cross-site use. Access to our systems is limited to people who need it, and administrative actions are logged. Invitations can be protected with a password, and are hidden from search engines by default. Sign-in, password-reset, invitation-password and admin-setup attempts are rate-limited to stop guessing, and invitation unlocks expire. We never see or store your full card number — card details go straight to our payment provider — and we will never ask for your password or a one-time code by email or phone. If we ever discover a breach affecting your data, we will tell you and the relevant authorities as the law requires.
Your rights and choices
- Access and portability — download everything we hold about you from your account page.
- Correction — edit your details and invitations at any time.
- Deletion — delete individual invitations, replies or your whole account from your dashboard. Deletion is permanent.
- Objection and questions — contact us at the email address on our contact page. We apply these rights to everyone, everywhere. Wherever you live, you keep any additional rights your local data-protection law gives you — including, where it applies, the right to complain to your data-protection authority.
Guests who want a reply or a photo changed or removed can remove their own photos from the invitation page, ask the hosts, or contact us and we will help.
Children
Our service is for adults planning events. We don't knowingly create accounts for anyone under 18.
Changes
If we make important changes to this policy we'll update the date above and, where appropriate, tell account holders by email.
Contact
Soulful Ties
Email: the email address on our contact page