Privacy Policy

Account information. When you create a NUPTIALS account we collect your name, email address, phone number (optional), and a password (stored hashed, never in plain text).

Wedding and guest information. To run your wedding website we store the details you and your guests provide: wedding date and venue, guest names and contact details, RSVP responses, dietary notes, plus-one counts, photos you upload, and gift registry activity.

Payment information. Gift contributions and plan upgrades are processed by Paystack. NUPTIALS never receives or stores your card number, CVV, or bank credentials — Paystack handles that directly and shares only the outcome (success/failure, amount, a reference ID) with us.

Usage information. We collect standard technical data — IP address, browser type, pages visited, and timestamps — to keep the service secure and working.

• To operate your wedding website, RSVP forms, gift registry, and guest check-in
• To send transactional emails and, where you enable it, SMS/WhatsApp notifications (RSVP confirmations, gift receipts, event reminders)
• To process payments and prevent fraud
• To provide customer support when you contact us
• To keep the platform secure, debug issues, and improve the product

We do not sell your data or your guests' data to anyone, for any reason.

When you invite guests and collect their RSVPs, you are the one deciding whose information goes into NUPTIALS — we act on your instructions to store and process it. You're responsible for having a legitimate basis (an invitation, a family relationship, a prior request) to hold your guests' contact details in the platform. Guests can ask you, or us directly at hello@nuptial.ng, to correct or remove their information at any time.

We share data only with the service providers that make NUPTIALS work, each bound to protect it:

• Paystack — payment processing for gift contributions and plan purchases
• Neon (Postgres hosting) — our database, hosted in the AWS eu-west-2 (London) region
• Vercel — application hosting and content delivery
• Email/SMS/WhatsApp providers, once notifications go live, strictly to deliver the messages you or your guests trigger

We disclose data to law enforcement only when legally required to do so.

We use a minimal set of cookies: one to keep you signed in (essential, can't be disabled without breaking login) and, if you accept them, basic analytics cookies to understand how the product is used. We don't run third-party advertising trackers.

We keep your wedding data for as long as your account is active, plus a reasonable period after your wedding date in case you want to revisit photos, guest lists, or gift records. You can request full deletion at any time — see Section 7.

Under the Nigeria Data Protection Act, 2023, you have the right to access, correct, or request deletion of your personal data, and to object to how it's processed. To exercise any of these rights, email hello@nuptial.ng— we'll respond within a reasonable time and in any case within the timelines the law requires.

NUPTIALS is not directed at children, and account holders must be 18 or older. Guest lists may include minors (children attending a wedding) added by the couple — we treat that data with the same care as any other guest record and never use it for anything beyond running the event.

Passwords are hashed, traffic is encrypted in transit (HTTPS), and access to production data is limited to the people who need it to operate the service. No system is perfectly secure, but we treat your data — and your guests' — as something we're trusted with, not something we own.

If we make material changes to this policy, we'll update the effective date above and, where the change is significant, notify account holders by email.

Questions about this policy or your data: hello@nuptial.ng.