Privacy Policy

a) Information you provide

• Account information — your first and last name, email address, and the password you choose when you sign up for MyWedding.rw.
• Wedding details — your partner names, the web address (subdomain) you pick, your city, and any wedding details (date, venue, story, dress code) you add in your dashboard.
• Photos and cards — save-the-date and invitation images you upload are stored on Cloudinary, a third-party image hosting service.
• Support messages — if you contact us by email we keep those messages to respond to you.

b) Guest information

• When guests RSVP through your wedding site they share their name, phone number, and response with you. This information belongs to you as the site owner; we store it to power your dashboard.
• We do not use guest data for our own marketing.

c) Payment information

• Activation fees and guest contributions are processed by our payment partner (KitovuPay). We do not receive or store full mobile-money credentials; we record only the transaction reference, amount, status, and the phone number used.

d) Usage and technical data

• We collect standard log data when you use the service: IP address, browser type, pages visited, and timestamps. We use this data to keep the service running and to detect abuse.
• We use a session cookie (httpOnly, Secure) to keep you signed in. We do not use advertising trackers or analytics cookies.

• Create and operate your wedding site and dashboard.
• Process activation fees and guest contributions through our payment partner.
• Send you transactional emails such as your welcome message, activation confirmation, and admin notifications.
• Respond to support requests.
• Detect and prevent fraud, abuse, and security incidents.
• Improve the platform based on how it is used in aggregate.
• Meet our legal and regulatory obligations.

Service providers

• Payment processing — KitovuPay processes mobile-money transactions. They receive the phone number and amount required to complete the payment.
• Image storage — Cloudinary stores photos you upload. Images are served from their CDN.
• Email delivery — we use an SMTP provider to send transactional emails. They receive the recipient address and message content.
• Hosting — our servers run on cloud infrastructure that may process data to deliver the service.

Legal reasons

• We may disclose information if required by law, a court order, or a government authority, or to protect the rights, property, or safety of the platform, our users, or others.

• Passwords are hashed with bcrypt and never stored in plain text.
• All traffic is encrypted in transit with HTTPS.
• Session tokens are stored in httpOnly, Secure cookies that cannot be read by JavaScript.
• Access to production data is restricted to authorised personnel.

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your account and personal data.
• Portability — request your data in a structured, machine-readable format.
• Objection — object to certain uses of your data.
• Restriction — ask us to limit how we process your data in certain circumstances.