Privacy Policy

The short version

We never sell personal data. We never sell, share, or monetize your vendor list. Your toast and vow drafts are never used to train AI models — by us or by anyone we work with. We don't run ads, and we don't use dark patterns to keep you here longer than you want to be.

Everything below explains how we live up to that in practice.

Your account and your wedding workspace

You can create an account with an email and password, with a magic link, or — where offered — by signing in with Google or Microsoft.

A wedding is a shared workspace with role-based membership: where a wedding has more than one member, shared planning data is visible to members according to their role. (Inviting members isn't exposed in the app yet — we'll update this page when it is.) Vow drafts written in Olivia's vow-writing studio are the exception: they're private to their author, and no other member of the wedding — owner included — can see them. Vows you type into the Ceremony Details form are ordinary shared planning data, visible to the wedding's members.

What you enter

Vow & Toast is built around 20 planning tools, so the data you give us is whatever planning a real wedding takes: your wedding details; your guest list (names, contact details, dietary needs, RSVP status); your vendors (contacts, quotes, ratings); the budget and payments you choose to record (amounts and currencies — we don't process these payments ourselves); your timeline, seating chart, checklist, and mood-board links, including Pinterest links you paste in; your toast material (story beats, drafts, pinned lines) and vow material; and, if you add one, a couple photo.

Some of this — your guest list, in particular — is data about other people. You're responsible for having the right to enter it into a shared planning tool.

The anonymous Toast Planner

You can draft one toast without creating an account. That draft is kept in your own browser's local storage, not on our servers. We set one httpOnly cookie, named "vt_olivia_draft", which is a signed token letting that one browser keep its one active draft, and we keep a best-effort daily counter of anonymous generations, keyed by IP address, to reduce abuse.

How Olivia and AI generation work

Toast and vow generation runs on Anthropic's Claude models through Anthropic's commercial API. Under Anthropic's commercial terms, inputs and outputs are not used to train their models by default, and we never opt into any data-sharing or feedback program that would change that. Our system can also be configured to route generation through OpenRouter, which would pass your inputs and outputs to OpenRouter and the model provider it selects; that path is not enabled today, and we will update this policy before we ever turn it on. We never use your drafts to train models of our own.

The material you give Olivia is used only to write your draft. When Olivia draws on outside knowledge for etiquette or structure, it's our own curated notes — never other users' content.

AI drafts can be wrong. You review every draft before you use it, and you own what you ultimately say.

Payments

Subscriptions are processed by Stripe. We never see or store your card number — we store your Stripe customer and subscription identifiers, plus your subscription status, so we know which features to unlock.

Plans, in USD: Weekly at $8.99/week, and Annual at $59.99/year with a 3-day free trial (granted once per account — a returning subscriber is charged immediately). You can cancel anytime, in one tap, through the Stripe billing portal, and you keep access through the end of the period you already paid for. Prices are shown in USD; the currency you're charged in at checkout may look different because of how Stripe presents it. We don't give refunds for partial periods except where the law requires it.

Analytics and error monitoring

We use PostHog for product analytics — explicit, named events only; autocapture, automatic pageviews, session recording, and exception capture are all off. PostHog receives event names and limited metadata such as sign-in method, the plan or tool involved, signed-in state, export method, and standard browser and device properties. Our event payloads never include toast content, vow content, or guest data.

We use Sentry for error monitoring with default PII sending turned off. Before a report is sent we remove request bodies and cookies, URL query strings, selected headers, and the user's email, username, and IP address. We do not attach toast, vow, or guest content to error reports, and our server logs never contain toast or vow content.

Who we share data with

We work with a short list of providers to run the service, and we only give each one what it needs to do its job:

• Supabase — our database, authentication, file storage, and the on-platform text embeddings the Toast Planner uses to look up our own etiquette notes; hosted in the United States.
• Vercel — hosting, DNS, and content delivery.
• Stripe — payment processing.
• Anthropic — AI generation for the Toast Planner and vow-writing studio.
• Google and Microsoft — identity providers, only if you choose their sign-in option.
• PostHog — product analytics (United States).
• Sentry — error monitoring.
• Exchange-rate providers for the budget tool — Frankfurter, open.er-api.com, and the Fawaz Ahmed Currency API (via jsDelivr). Our scheduled rate refresh sends them currency codes only, never anything about you or your wedding.

Cookies

We use a small number of cookies, each with a clear job:

• Supabase authentication session cookies — strictly necessary, to keep you signed in.
• The "vt_olivia_draft" cookie — strictly necessary, to let an anonymous visitor keep their one active draft.
• PostHog analytics identifiers — analytics only; we don't use them for cross-site tracking, and we don't run ad cookies.
• Stripe's own cookies, set on Stripe's hosted checkout pages under Stripe's own policy.

What we never do

To be direct about it:

• We never sell personal data.
• We never sell, share, or monetize your vendor list.
• We never use your content to train AI models.
• We never show ads.
• We never use dark patterns — no fake urgency, no retention mazes designed to make leaving hard.

Your controls

From Settings, members can export the wedding profile and the supported planning tables as a JSON backup, plus a guest CSV, at any time. A signed-in user can import a backup's profile into a new wedding; restoring the table data needs an active plan. Editors on an active plan can clear the seeded sample checklist. The backup doesn't yet include every tool, toast or vow drafts, or uploaded media.

Account deletion isn't self-service yet. Email hello@vowandtoast.app from your account's email address to request deletion of your account and its wedding data; we may need to retain what the law requires, such as payment records that live with Stripe.

If you're in the United Kingdom, Switzerland, Iceland, or the EEA, you have rights of access, rectification, erasure, portability, restriction, and objection over your data. Exercise any of them by emailing hello@vowandtoast.app.

Where your data lives

Our infrastructure is hosted in the United States. By using Vow & Toast, you accept that your data is transferred there.

Children

Vow & Toast isn't directed at people under 16, and we don't knowingly collect their data.

Changes to this policy

If we make a material change to this policy, we'll post the update on the site.

Contact us

Questions about this policy, or a privacy request of your own — reach us at hello@vowandtoast.app.