Wed One Privacy Policy

Information you provide

We process your account email, authentication information, profile name and any phone number or avatar you provide. Event workspaces may contain guest names, contact details, RSVPs, food allergies and dietary information, schedules, tasks, vendor details, messages, invitations, estimates, payment records and uploaded PDFs or images. Only enter information you have permission to share. Food-allergy details may be sensitive; share them only with people who need them for the event.

How we use information

We use this information to authenticate users, coordinate events, share records with authorized team members, provide support and review safety reports. If you enable personalization, Wed One saves counts of the sections you visit to suggest your starting page. This learning does not use your messages or event content. You can turn it off and clear the counts in Profile & Settings. You can separately choose Share section-use counts to improve Wed One. This is off until you enable it; turning it off removes those counts from the owner dashboard.

Who can access information

Event records are shared according to event membership, roles and creator-approved editing permissions. People holding private invitation or estimate links may be able to see the information those links disclose, subject to their access rules. Keep private links confidential. Authorized administrators may review submitted safety reports and account-deletion requests. Providers used to operate the service include Supabase for authentication, database and file storage, and OpenAI Sites and its hosting infrastructure for the website. Providers may process technical connection information such as IP addresses and operational logs. Richard Butler Jr. has an owner-only profile dashboard showing account contact details, verification and sign-in status, preferences, and event-membership counts for account administration. Section-use counts are visible there only with your separate usage-sharing choice. Financial records, raw messages, notes and uploaded documents are excluded from that dashboard area.

Payments and advertising

Wed One memberships cost $149/month for venues and $99/month for planners and $49 once for couples, waived with a venue or planner invitation. Invited staff accounts are free. Stripe handles membership card details. Estimates and recorded offline payments do not mean Wed One has processed a card payment. Do not enter card numbers or bank passwords into event notes. The current release has no advertising SDK and does not sell personal data or use it for cross-app advertising tracking. When you arrive through a campaign or referral link, Wed One may save its source, campaign label and referral code with a new account to measure registrations. These labels do not grant access to another person or event.

Device storage and security

Remember-me stores authentication tokens on your device, not your password. You can sign out or use Forget this device. We use access controls and private file storage. Authorized downloads and previously issued links cannot always be recalled immediately; private file links can remain valid for up to five minutes. No online service can guarantee absolute security. Use your own trusted device and a unique password.

Retention and deletion

Account and event information remains while needed to provide the service. During account removal, personal messages, uploaded objects, profile information and sign-in credentials are removed. Shared business records may remain with anonymous author attribution; support reviews any personal information within those records and explains justified retention. Use Profile & Settings → Delete my account to submit a deletion request, or email wedoneapp@gmail.com from your account address. Accounts without ownership responsibilities can be deleted through the app. Accounts that own a workspace, event, company or administrator role need ownership review before removal. We verify identity, arrange transfer of shared ownership where needed, and explain any records retained for another participant’s event, a legal requirement or dispute. Completion timing and any applicable retention period will be confirmed during that review. Deleted production records may remain in provider backups until those backups expire. Do not send your password.

Your choices and contact

You can update your display name, turn personalization off, clear learned counts, forget a device and request access, correction or deletion by contacting wedoneapp@gmail.com. Where applicable, you may have additional privacy rights. Wed One is designed for adult event professionals and adult clients, not for children to create accounts. If a child’s personal data has been submitted improperly, contact us. Service providers may process data outside your region. Material changes will be reflected in this policy’s effective date.

Archive or deactivate your account

Choose More → Profile & Settings → Archive / deactivate account and type DEACTIVATE to pause access. This signs you out on all devices and retains your existing account, profile, preferences, messages and uploads until you reactivate or permanently delete. Shared records remain available to authorized collaborators. The owner-only profile dashboard continues to show your nonfinancial profile and archived status; financial records, raw messages, notes and documents remain excluded from that dashboard area. Existing usage-sharing choices do not change. Sign in again and explicitly choose Reactivate account to return; expired or revoked permissions are not restored. You can choose Permanently delete account from the deactivated-account screen without reactivating. Deactivation does not cancel separate financial obligations. A pending deletion request must be resolved with support before archiving or reactivating.

Optional offline plans

If you choose Save / update offline in Wedding-Day Command, this browser stores an encrypted copy of the timeline, tasks, vendor arrivals and event contacts, protected by your separate offline passphrase. Saved copies expire within 24 hours or earlier when scheduled access ends. Confirmations queued offline are checked against current access and timeline revisions when you reconnect and sync. Remote access removal cannot reach a disconnected browser. Signing out removes saved copies and unsynced confirmations from this browser. You may also remove copies from Offline plans. Browser storage may be cleared by your browser; offline copies are not backups.

Directory ratings

Your account may submit one 1–5-star rating per business based on your own experience. You can edit or remove your rating. Wed One publishes aggregate scores and counts; it does not publish your account identifier with the rating. These are member ratings, not verified bookings or imported third-party reviews.

Optional QuickBooks Online connection

Venue and planner business owners may connect their own QuickBooks Online company through Intuit authorization. Wed One stores the company identifier and name, connection status and timestamps, and encrypted access and refresh tokens on the server to verify and maintain that connection. Tokens are not returned to the browser or placed in offline plans. Each connection is limited to its owning business. This release checks the company connection; automatic customer, estimate, invoice and payment synchronization is not enabled. Choose More → QuickBooks → Disconnect to revoke access and remove the stored connection. If the request fails, the connection remains until disconnection succeeds; you can also revoke access in QuickBooks. Disconnecting does not delete your financial records in QuickBooks. Intuit processes information under its own policies.

QuickBooks connection details added October 6, 2026.

Public-site analytics

On public marketing pages, Wed One measures page views, referral domains and campaign labels, approximate device categories, signup starts and demo plays. A random browser identifier expires after 90 days; a tab session expires after 30 minutes of inactivity. These are estimates of browsers, not identified people. We skip signed-in browsers, private invitation and account-recovery links, and browsers sending Do Not Track or Global Privacy Control. Analytics does not collect names, email addresses, form entries, passwords, full URLs, private event content or account identifiers. We keep measurement records for up to 90 days. Raw IP addresses and user-agent strings are not stored in analytics; a daily rotating keyed IP hash is used only for abuse limits and deleted within two days. Hosting providers may retain their own operational logs. This is separate from optional signed-in section-use sharing. You can turn off public-site analytics for this browser below; clearing browser storage resets this choice. Registration counts come separately from existing account records and are not linked to anonymous browser identifiers.

Turn off public-site analytics Turn on public-site analytics

Pedal saved questions and learning

Pedal stores your signed-in questions, its displayed answers, the selected wedding reference, topic and optional helpfulness feedback for up to 90 days. Saved Q&A is private to your account and is separate from shared wedding records. Open Pedal → My saved Q&A to review recent exchanges or clear your saved history. We use topic counts and feedback to identify gaps and personalize guide suggestions. Only when you select Share this question for Pedal improvements does the question text enter the platform administrator review queue; saved answer text is not shown there. Obvious email addresses, long numbers and recognized secrets are filtered, but filtering is not guaranteed: do not enter or share passwords, payment details or confidential information. Administrators review shared wording before linking it to an existing verified guide. Learning changes guide recognition and suggestions; it does not automatically retrain an AI model, copy private event details into other users’ answers or grant additional access. Clearing history or withdrawing sharing removes reviewed wording tied to that record. Questions and their learned wording expire with the 90-day retention period.