Privacy Policy

Okerly ("Okerly", "we", "us") runs okerly.com, a service that lets couples create wedding invitation websites and save-the-date cards and collect their guests' replies online.

This policy applies to couples who buy and use Okerly, the collaborators they invite to help, and the guests who open an invitation or reply to one. For questions about it, write to us at [email protected].

We only collect what we need to run the service:

• Account details — your name, email address, password (stored only as a secure hash) and preferred language. If you sign in with Google, Google shares your name, email address and Google account ID with us; we never see your Google password.
• Purchase details — the plan you bought, the amount, the date and the payment status. You enter your card details directly with Stripe, our payment processor; we never see or store your full card number.
• Wedding content — everything you add to your invitation and save-the-date card, such as names, dates, venues, the schedule, your story and the photos you upload.
• Guest replies — what guests submit through the RSVP form: their names, whether they are attending and the size of their party, plus contact details, dietary needs and messages when the couple asks for them.
• Collaborators — the email addresses of the people you invite to edit your invitation with you.
• Technical data — your IP address, browser, device and the pages you request, used to keep the service secure (for example by limiting repeated sign-in attempts) and working properly.

We use your information to:

• create your account and host your invitation, save-the-date card and RSVP form;
• process payments;
• send emails you need, such as your welcome email, password resets and collaborator invitations;
• keep Okerly secure and prevent fraud and abuse;
• find and fix errors and improve the service;
• meet our legal, tax and accounting obligations.

We don't sell your personal information, we don't use it for advertising and we never contact your guests for our own purposes.

If you live in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: performing our contract with you (to provide the service you bought), our legitimate interests (to keep the service secure and improve it, in ways that don't override your rights), compliance with legal obligations (for example keeping invoices), and your consent where the law requires it.

When you reply to an invitation, the couple decides which questions to ask and is responsible for how your reply is used. We store and process your reply on their behalf, and only they and the collaborators they invite can see it.

To change or remove your reply, contact the couple directly, or write to us at [email protected] and we will help.

We share personal information only with the service providers that help us run Okerly, and only as much as each one needs:

• Stripe — payment processing.
• Cloudflare — storage and delivery of the photos you upload.
• Google — only if you choose to sign in with Google.
• Sentry — error monitoring. Error reports identify an account only by its internal ID, never by name or email address.
• PostHog — website analytics, hosted in the EU. It sees which pages are visited and which buttons are clicked and, if you accept analytics cookies, your approximate location (country and city) worked out from your IP address. It never sees your name or email address.
• Our hosting and email delivery providers — to run the application and send service emails.

A published invitation can be viewed by anyone who has its link, and the collaborators you invite can see your invitation and guest replies. We may also disclose information when the law requires it, or to a successor if Okerly is ever sold or merged, in which case this policy will continue to protect it.

Okerly uses cookies that are strictly necessary for it to work: a session cookie that keeps you signed in and remembers your language, a security token that protects forms against forgery and, if you tick "Remember me", a cookie that keeps you signed in longer.

With your consent, we also use PostHog analytics cookies to understand how visitors use Okerly. Until you accept them, and if you decline, PostHog counts your visits anonymously, without cookies, and we remember only your choice on your device. You can change your choice at any time with the "Cookie settings" link at the bottom of every page. Couples' invitation and save-the-date pages never set analytics cookies.

We don't use advertising cookies. When you pay, Stripe's checkout page may set its own cookies to prevent fraud, under Stripe's privacy policy.

We keep your account, wedding content and guest replies for as long as your account exists. When you delete your account from Settings, we permanently delete your invitations, save-the-date cards, guest replies and uploaded photos.

We keep purchase records for as long as tax and accounting laws require. Server logs and backups are overwritten automatically on a rolling basis.

All traffic to Okerly is encrypted with HTTPS, passwords are stored only as secure hashes, sign-in attempts are rate-limited and access to production systems is restricted to the people who need it. No system is perfectly secure, but we work hard to protect your information and will tell you promptly if a breach affects you.

Our service providers may process information in countries other than yours, including the United States. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses to protect it.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate;
• delete your information;
• receive a copy of it in a portable format;
• object to or restrict certain processing;
• withdraw your consent at any time, where we rely on it.

You can update or delete most of your information yourself in Settings. For anything else, email [email protected] — we answer every request within 30 days. You can also complain to your local data protection authority.

California residents: we don't sell personal information or share it for cross-context behavioural advertising, and we won't treat you differently for exercising your privacy rights.

Okerly is meant for adults planning a wedding. We don't knowingly collect personal information directly from children under 16. If you believe a child has given us their information, contact us and we will delete it.

We may update this policy as Okerly grows. We will change the date at the top of this page whenever we do, and if a change is significant we will tell you by email before it takes effect.

For any question about this policy or your personal information, write to us at [email protected].