Privacy Policy

1. Introduction

Welcome to Vybel ("we," "us," or "our"). We provide a platform that enables couples to create, manage, and host premium wedding websites (the "Service"). Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our Service.

By using Vybel, you agree to the collection and use of information in accordance with this policy. For the purposes of data protection laws, Vybel is the data controller of your personal information. We are based in Sri Lanka and operate globally.

2. Information We Collect

We collect information to provide and improve our Service. This includes:

A. Information You Provide to Us

• Account Information: When you register for an account, we collect your name, email address, and profile picture. If you use a third-party service (like Google Sign-In) to log in, we collect your authentication token and basic profile information provided by that service.
• Wedding & Event Details: To generate your wedding website, we collect the information you voluntarily input, such as your partner’s name, wedding dates, venue locations, schedules, and any text or media you upload to your page.

B. Payment Information

We do not store or process your credit card numbers or financial details directly. All payments are handled by our Merchant of Record, Lemon Squeezy.

When you make a purchase, Lemon Squeezy processes the transaction. We only receive confirmation of the transaction (such as a "paid" status, subscription tier, and transaction ID) to enable premium features on your account.

C. Automatically Collected Information

Log Data: Like most websites, we automatically collect certain data when you visit Vybel, including your IP address, browser type, and device information. This helps us ensure the security and performance of our application.

3. How We Use Your Information

We use the collected information for the following specific purposes:

• To Provide the Service: We use your account and wedding details to host, render, and display your personalized wedding website to you and your invited guests.
• To Process Transactions: We use payment status confirmation from Lemon Squeezy to grant you access to premium features.
• To Communicate with You: We send essential transactional emails, such as account confirmation, password resets, and notifications when your website goes live.
• To Manage RSVPs: If you use our RSVP features, we process guest information (names and emails) solely to send confirmation emails to your guests on your behalf and to organize your guest list within your dashboard.

4. Cookies and Tracking Technologies

We use cookies to distinguish you from other users of our Service. This helps us to provide you with a good experience and allows us to improve our Service. We classify our cookies into two categories:

A. Strictly Necessary Cookies (Admin & Application)

These cookies are essential for the operation of our application (admin.vybel.co). They enable you to log into secure areas of our website. Consent is not required for these cookies, as the Service cannot function without them.

• Authentication: We use Google Firebase to verify your identity and keep you logged in as you navigate the dashboard.
• Security: We use cookies to prevent Cross-Site Request Forgery (CSRF) and ensure data security.

B. Analytics & Performance Cookies (Marketing Site)

On our public marketing pages, we use analytics tools to help us understand how visitors interact with the site (e.g., visitor counts, bounce rates).

• Google Analytics: Collects anonymous statistical data. These cookies are optional and will only be set if you give your consent via our cookie banner.

You can manage your analytics preferences at any time by clearing your browser cookies for this domain.

5. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties for marketing purposes. We only share your information with trusted third-party service providers to help us operate our Service, conduct our business, or serve you, as long as those parties agree to keep this information confidential.

These service providers include:

• Infrastructure & Hosting: We use Google Cloud Platform (Firebase) for hosting, data storage, authentication, and analytics. Google has access to the data stored on their servers for the purpose of providing these services.
• Payment Processing: All financial transactions for premium features or archival services are processed by Lemon Squeezy, our Merchant of Record. We share necessary transaction data with them to process your payments.

We may also disclose your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety.

6. Data Retention

We will retain your personal information and website content only for as long as is necessary for the purposes set out in this Privacy Policy.

Active Sites

We retain your data while your account is active and your subscription or one-time payment is current.

Unpaid Users (Never Published)

• If you create an account but never upgrade to a paid plan and remain inactive for a period of one (1) year, your account and all associated data will be permanently deleted.
• We will provide you with a notice via your registered email address at least one (1) month prior to deletion.

Paid Users (Subscription or One-time)

• If your subscription lapses or is canceled, your website goes offline, but your data (including guest lists, photos, and digital guestbook entries) is securely retained.
• If a previously paid account remains inactive for a period of one (1) year after the last payment or cancellation, it will be subject to the same deletion policy as unpaid users (deletion with a one-month pre-notice).

Other Retention Scenarios

• User-Initiated Deletion: You may delete your wedding website at any time through your account dashboard. Upon your request, your site data will be permanently deleted.

Please note that we may retain your basic account information (such as your email address) for a longer period as necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements.

7. Data Security

We take the security of your data seriously. We utilize industry-leading infrastructure to protect your personal information:

• Data Storage: Your account data and wedding details are stored on Google Firebase (Firestore), protected by strict security rules that ensure only authorized users can access or modify specific data.
• Media Storage: User-uploaded photos and media are securely stored using Cloudflare R2 storage.
• Transmission: All data exchanged between the application and your device is encrypted using SSL/TLS (Secure Socket Layer) technology.

While we implement these robust security measures, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

8. Your Rights

We believe you should have full control over your data. As a user of Vybel, you have the following rights:

• Right to Access & Portability: You can access your data at any time by logging into your account. We provide features that allow you to export your data, such as downloading your guest RSVP list as an Excel file and downloading original resolution photos uploaded by you or your guests.
• Right to Correction: You can edit or update your personal information, wedding details, and website content directly through your dashboard at any time.
• Right to Deletion: You have the right to delete your account and all associated data. We provide a simple "Delete Site" option within your account settings that immediately cancels your service and removes your data from our active databases.

If you are unable to perform these actions yourself, you may contact us for assistance.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and, if the changes are significant, sending you an email notification. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: support@vybel.co