Privacy Policy

This Privacy Policy explains how KnotPlan ("we", "us", or "our") collects, uses, stores, and protects your personal data when you use our wedding planning service (the "Service"). By creating an account or using the Service, you agree to the practices described in this policy. If you have any questions, contact us through our contact form.

1. Data We Collect

We collect only the information you provide and the data necessary to run the Service:

• Account information — your name, email address, and a securely hashed password.
• Wedding data — wedding date, couple names, venue, and other planning details you enter.
• Guest data — guest names, email addresses, phone numbers, RSVP status, and dietary preferences.
• Vendor data — vendor names, contact details, prices, and notes.
• Budget data — expense categories, planned and actual amounts, and payment or due dates.

2. How We Use Your Data

We use the data you provide to operate, secure, and improve the Service, including:

• Providing the core planning tools: guest management, seating, timeline, vendors, budget, and tasks.
• Generating the Coordination Pack PDF and sharing it with you.
• Sending important account and service notifications.
• Keeping the Service secure and preventing abuse.

We never sell your personal data, and we do not use your wedding data for advertising or marketing purposes.

3. Data Storage and Security

We take reasonable measures to protect your data:

• Data is stored in a secure SQLite database and encrypted at rest where possible.
• All traffic between your browser and our servers is encrypted in transit (TLS/HTTPS).
• Passwords are stored as salted, one-way hashes — never in plaintext.
• Authentication uses secure session cookies with CSRF protection.

No method of transmission or storage is 100% secure, but we work to protect your data.

4. Data Sharing

We never sell your data. We share personal data only where it is required to provide the Service:

• Payment processing via Lemon Squeezy for paid features.
• Email delivery via Resend for account verification and notifications.
• Infrastructure and hosting providers.

These providers process data only on our behalf and under our instructions.

5. Your Rights

Depending on your location (including under the GDPR), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Export (portability) your data in a machine-readable format.
• Object to or restrict certain processing.

To exercise these rights, reach out via our contact form. We respond to verified requests promptly.

6. Data Retention

We retain your data for as long as your account remains active and you continue to use the Service. You may delete your account at any time, which removes your wedding data. We may retain limited data where required by law or for legitimate legal purposes.

7. GDPR Compliance

KnotPlan is committed to compliance with the EU General Data Protection Regulation (GDPR). We process personal data on the lawful bases of contract performance (providing the Service), legitimate interests (securing and improving the Service), and consent where required. If you are in the EEA or UK, you may contact our data privacy team through our contact page.

8. Contact

Questions about this policy or about your data can be sent through our contact form.