Privacy policy
Last updated: 2026-10-11
Yes, I Do Club helps couples organize their wedding. To do that we keep data about the couple and about the people they invite. Here is which data, what for, who sees it and what you can do about it.
Who is responsible
Laura Fadul Eventos ("Yes, I Do Club", "we"), based in Córdoba, Argentina, runs app.yesidoclub.com and the wedding and RSVP pages (boda.yesidoclub.com).
Privacy contact: privacy@yesidoclub.com. Ask us and we will give you a full postal address.
Two different roles: the couple and us
- Your account and your wedding. If you create an account, we are the controller of your data as a user.
- Guests and other people the couple adds. The couple decides whom to invite, what data to add or import, and what to ask in the RSVP. For that data the couple decides and is responsible; we process it on their behalf, only so they can organize their wedding. When a couple plans their wedding as a private, family matter, data protection law may not even apply to them, but it does apply to us, so we protect that data just the same.
- What we do on our own account. For security, abuse prevention and legal obligations we are also the controller of the technical data that visits generate (for example, IP addresses in server logs).
What we keep about the couple
- Account: email, display name, language and, if you sign in with Google, Microsoft or Facebook, the identifier that service gives us. We never receive your password for those services.
- Your wedding: your names, date, places (ceremony, reception, where you live), ceremony type, style and languages, and what you write on your wedding page.
- Planning: budget, contributions (for example from family), vendors, quotes, contracts, payment schedules and payments made, tables.
- Technical data: IP address, browser and time of each request, in server logs for 30 days, for security and to fix errors.
Guests’ data
If you were invited to a wedding organized with Yes, I Do Club, the couple added your details so they could invite you. Only the couple sees them (and, in the future, people they give access to for planning the wedding). We use them for nothing else, we never sell them and we never use them for advertising.
- What the couple adds: name, household, which side you are from, whether you are an adult, teen, child or baby, plus-ones and, if they have them, an email or phone number. The couple may import these from their address book, a file, or their Google or Microsoft account.
- What you answer in the RSVP: whether you are coming and to which parts, your plus-ones and, if you want, diet or allergies, needs (accessibility, high chair, stroller), an email or phone number for updates, a song and a message for the couple.
- Diet, allergies and accessibility can reveal health data. They are always optional; by entering them you explicitly agree that they are kept so the couple and their caterer or venue can take them into account (GDPR Art. 9(2)(a)). You can change or delete them through the same link while it is active, or ask the couple or us.
- Your table: the couple may seat you at a table; we never publish it anywhere.
Your RSVP link is personal: whoever has it can see and change your household’s answers. Please don’t share it.
The wedding page is visible to anyone with the link. It shows what the couple chooses to publish (for example their story, events and addresses), never the guest list or the answers.
What for, and on which legal basis
- Providing the service (your account, your wedding, the RSVP pages): performance of the contract you accept by using the app (GDPR Art. 6(1)(b)).
- Security, abuse prevention and improving the service without optional cookies: our legitimate interest (Art. 6(1)(f)).
- Analytics and advertising cookies: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Guests’ data: on the couple’s behalf, so they can organize their wedding; health data with the explicit consent of whoever enters it (Art. 9(2)(a)).
- Legal obligations (for example invoicing once paid features exist): Art. 6(1)(c).
We only send the emails you asked for (sign-in links, the couple’s invitations, service notices). No newsletters without your permission.
Who else processes the data
Only companies we need to provide the service, under data processing agreements where they act for us:
- Contabo GmbH (Germany): the servers that run the app and the database. Emails are sent from our own server.
- Google, Microsoft and Meta: if you sign in with them or import contacts and, if you accept them, the analytics and advertising described above.
- Open-Meteo: receives the place name you type when searching for a city, to give us its location and time zone. It receives nothing else.
- Cloudflare: manages our domains (DNS), hosts the yesidoclub.com marketing site and stores our backups in the European Union, encrypted with a key only we hold.
We don’t sell personal data or share it for third-party advertising. We would only hand it to an authority where the law requires it.
Google and Microsoft contacts
If you import contacts, we read your address book only at that moment and only to show you the list; we keep just the contacts you choose to add as guests. We don’t keep access to your account to read it again later.
Yes, I Do Club’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
International transfers
Our servers are in the European Union. We are based in Argentina, which has an adequacy decision from the European Commission. Google, Microsoft and Meta may process data in the United States; those transfers rely on the EU–US Data Privacy Framework, to which they are certified, and on Standard Contractual Clauses.
How long we keep it
- Your account and your wedding: as long as you use them. In Settings you can delete the wedding and everything in it; it is removed from the database at once.
- A guest, household, vendor or contribution the couple removes: its personal data becomes unreadable at once, in the history too (we destroy its encryption key).
- Backups: deleted data disappears from them within 30 days.
- Server logs: 30 days.
Security
Everything travels encrypted (HTTPS). Personal data in the history is encrypted with a key per person. Signing in needs no password: we use single-use links that expire after 15 minutes, or your Google, Microsoft or Facebook account.
Your rights
You can ask for a copy of your data, have it corrected or deleted, object to or restrict a use of it, get it in a portable format, and withdraw consent at any time. Email privacy@yesidoclub.com and we will reply within one month.
If you are a guest, you can contact the couple or us directly: we will help and, where needed, pass your request on to the couple.
You can also complain to a data protection authority: in Argentina the Agencia de Acceso a la Información Pública (AAIP), in Spain the Agencia Española de Protección de Datos (AEPD), or the one in your country.
Children
You must be an adult to create an account. A couple may add children as guests (name and age group, plus their needs if whoever answers the RSVP gives them); we treat that with the same care and only for the wedding.
Changes
If we change this policy in a meaningful way, we will tell you in the app or by email before it takes effect. The date at the top shows the current version.