Privacy notice
This page describes the data flows implemented in the Walimah Studio MVP. Replace the operator details, retention periods and contact information after a formal privacy and legal review before public launch.
Information handled
The platform can store account details, wedding-project content, uploaded artwork, guest names and contact details, RSVP responses, meal notes, wishes, check-in timestamps, invitation interaction counts, and payment-order status. Payment card or online-banking credentials are not collected by the application.
How the information is used
Information is used to operate invitation workspaces, create personalised guest links, collect RSVP responses, support wedding-day check-in, present invitation analytics, activate paid plans, and provide account administration.
Sharing and processors
When configured, selected information may be sent to hosting, database, storage, analytics, payment, Canva, email, or messaging providers required to deliver the service. The production operator should name each provider and document the relevant processing purpose.
Guest-list responsibility
Workspace owners should only upload guest information they are authorised to use for the wedding invitation. They are responsible for keeping the list accurate and removing it when it is no longer needed.
Retention and deletion
The MVP keeps records until an authorised user deletes them or the local datastore is reset. A production release should define automatic retention periods, backup handling, account deletion, guest export, and verified deletion workflows.
Security and contact
The MVP includes signed sessions, password hashing, security headers and access controls. Production deployment still requires managed secrets, HTTPS, backups, monitoring, rate limiting and incident-response procedures. Replace privacy@walimah.studio with the operator’s monitored privacy contact.