1. Information We Collect

Information You Provide:

Account information (email, name, password)
Wedding details (date, venue, aesthetic preferences)
Uploaded images (venue photos, inspiration images)
Generated content and prompts
Payment information (processed by Stripe)
Proposal and contract content you create
Electronic signatures (drawn signature images)
Client information you enter in proposals (names, emails, event details)

Information Collected Automatically:

Usage data (features used, generation history)
Device information (browser type, OS, IP address)
Cookies and similar tracking technologies
Analytics data (via Vercel Analytics)
Signature timestamps and signing session metadata

Information from Third Parties:

Clients who sign proposals (name, email, signature image)
Information from connected services (if you link external accounts)

2. How We Use Your Information

Provide and improve the Service
Process AI image generation requests
Facilitate proposal creation, sharing, and electronic signing
Store and display electronic signatures on contracts
Send transactional emails (proposal notifications, signature confirmations)
Communicate about your account and updates
Analyze usage to improve features
Prevent fraud and ensure security
Comply with legal obligations

3. Proposal and Signature Data

Electronic Signatures: When you or your clients sign a proposal, we collect and store:

The signature image (drawn or typed)
Name and email of the signer (as provided by the signer)
Timestamp of when the signature was applied
IP address at time of signing (for verification purposes)

Important Notice: We store signature data as provided to us but do not independently verify signer identity, legal authority, or the authenticity of signatures. The data we collect is intended to create an audit trail but does not constitute proof of identity or legal validity.

Proposal Sharing: When you share a proposal with a client, they can access the proposal content via a secure link. Client signers will have their signature data stored as described above.

Client Data: If you are a wedding professional, you may enter client information (names, emails, event details) into proposals. You are responsible for:

Having appropriate consent to share client information with WedVis
Complying with applicable privacy laws regarding client data
Informing clients that their signature and personal data will be stored by WedVis

4. Information Sharing

We DO NOT sell your personal information. We share information only:

With Service Providers: Supabase (database), Vercel (hosting), Stripe (payments), Google (AI processing), Resend (email delivery)
Between Contract Parties: Proposal content and signatures are shared between the vendor and client parties to a contract
For Legal Reasons: If required by law or to protect rights and safety
With Your Consent: When you explicitly agree to sharing
Business Transfers: In case of merger or acquisition

5. Data Accuracy and Verification

WedVis stores data as provided by users and signers. We do not independently verify:

The identity of persons creating accounts or signing documents
The accuracy of names, emails, or other information provided
The legal authority of signers to enter into contracts
The authenticity of drawn or typed signatures

Users are solely responsible for verifying the identity and authority of all parties involved in their transactions.

6. Data Security

We implement industry-standard security measures including:

Encryption in transit (HTTPS) and at rest
Row-level security in database
Secure storage of signature images
Unique, non-guessable tokens for shared proposal links
Regular security audits
Limited employee access to data

7. Your Rights and Choices

Access: Request a copy of your data
Correction: Update inaccurate information
Deletion: Request account and data deletion
Portability: Export your data
Opt-out: Unsubscribe from marketing emails

Note on Contract Data: Executed contracts and signatures may be retained even after account deletion to fulfill legal record-keeping requirements and to preserve the integrity of signed agreements. This retention is necessary because: (a) other parties to the contract may need access to the signed document; (b) the signature record may be required as evidence in legal proceedings; (c) applicable laws may require retention of business records.

8. Data Retention

We retain your data while your account is active. After account deletion:

Account data: Deleted within 30 days
Generated images: Deleted within 90 days
Proposals and signatures: Retained for 7 years for legal compliance
Backups: Purged within 6 months
Legal records: Retained as required by law

9. California Privacy Rights (CCPA)

California residents have additional rights including the right to know, delete, and opt-out of data sales (we don't sell data).

10. GDPR Rights (European Users)

EU users have rights under GDPR including access, rectification, erasure, and data portability. For electronic signatures, we process data based on contractual necessity and legitimate interest in maintaining signed agreement records.

11. Children's Privacy

The Service is not intended for children under 13. We don't knowingly collect data from children.

12. Changes to Privacy Policy

We'll notify you of material changes via email or Service notification.

13. Contact Us

For privacy concerns: aj@wedvis.com