Privacy Policy

1. Who We Are

UnityVows is operated by Able Strategies, LLC, a Michigan limited liability company ("we", "our", "us"). UnityVows is a B2B SaaS platform that provides wedding planning and management tools to professional wedding planners, event coordinators, and their associated teams.

Registered address: 23377 Argyle St, Novi, MI 48374, United States
Data controller contact: privacy@unityvows.com

1.1 Who decides about wedding data

Planners, agencies and couples use UnityVows to organise weddings. They decide what data about their clients, guests, vendors and staff goes into their workspace and why: for that data they are the controller, and UnityVows is the processor that handles it on their behalf under our Data Processing Agreement. If you are a guest or a vendor, the planner or couple who invited you is the first place to ask about your data; requests we receive are passed to them. UnityVows is the controller for its own account holders, billing, security and product analytics data. A couple planning their own wedding for personal reasons may be outside data protection law for their own handling of guest data; we protect that data in the same way.

2. Information We Collect

We collect information in the following categories:

• Account data — name, email address, phone number, and hashed password when you create an account.
• Organisation data — business/organisation name and billing details provided during onboarding.
• Wedding data — couple names, event dates, venue, guest lists, budgets, tasks, vendor contracts, and any other content you upload or create inside the platform.
• Usage data — pages visited, features used, session timestamps, IP address, browser type, and device identifiers collected automatically via server logs.
• Wedding payment records — amounts, due dates and notes that planners record about payments between them, their clients and vendors. These are records only: UnityVows does not send, receive or hold that money and never receives card details for it. Vendor bank details entered for reference are encrypted and shown masked.
• WhatsApp — the phone number of people who agreed to WhatsApp messages, the messages sent and received, and a record of how and when they agreed or opted out (reply STOP at any time).
• Payment data for UnityVows — subscription plan, billing cycle, and transaction references. Card and bank details are collected and processed solely by Paddle, our Merchant of Record (MoR): Paddle is the seller of record for your subscription, calculates and remits applicable taxes where required, and handles payment authentication. UnityVows does not store full card numbers or CVV data on our servers; we may receive limited billing metadata (e.g. last four digits, brand, country, and invoice IDs) from Paddle to operate your account.
• Communications — content of support requests and any email correspondence with our team.

3. How We Use Your Information

• Provide, operate, and maintain the UnityVows platform.
• Manage your UnityVows subscription (Paddle processes the payment).
• Send transactional emails (account verification, password reset, invitation links).
• Provide customer support and respond to your enquiries.
• Analyse aggregated, anonymised usage patterns to improve the product.
• Comply with applicable laws and enforce our Terms of Service.

We do not use your data to train AI or machine-learning models, nor do we use it for advertising purposes. When you use an AI feature (such as the Smart Planner), the text and wedding details sent with that request are processed by Anthropic (or OpenAI as a backup, if enabled) under API terms that do not allow them to train on it. Photos are never used to identify people: UnityVows does no face recognition.

4. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (EU/UK GDPR) applies, we rely on the following legal bases:

• Contract performance — processing necessary to deliver the services you have subscribed to.
• Legitimate interests — security monitoring, fraud prevention, and product analytics (where not overridden by your rights).
• Legal obligation — retaining financial records as required by applicable law.
• Consent — optional marketing communications (you may withdraw consent at any time).

5. Data Sharing and Disclosure

We share data only in the following circumstances:

• Sub-processors — providers that help us run UnityVows: Amazon Web Services (hosting, storage, email and SMS), Paddle (Merchant of Record for UnityVows subscriptions only), Meta (WhatsApp messages), Anthropic (AI features), Twilio SendGrid (backup email) and Google Firebase (mobile app crash reports and analytics). The full list — what each does, the data it receives, where it is and the transfer safeguard — is at /legal/subprocessors. They process personal data only as needed to provide their services, under data protection agreements.
• Within your organisation — staff members, collaborators, and wedding clients you explicitly invite within the platform can access wedding data you share with them.
• Legal requirements — when required by law, court order, or to protect the rights and safety of UnityVows or others.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity subject to equivalent privacy protections.

We never sell, rent, or trade your personal data to third parties for marketing purposes.

6. Data Retention

7. Security

We implement industry-standard technical and organisational measures including field-level encryption of vendor bank details, TLS (HTTPS) for data in transit, access controls with role-based permissions, and security reviews. Where we store certain third-party integration credentials in our application database, we encrypt them using AES-256 (application-layer encryption). Our cloud database and storage layers also rely on provider-managed encryption at rest operated by AWS. No system is 100% secure; we will notify you of any breach that affects your rights and freedoms as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Restriction — ask us to restrict processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is consent-based, withdraw at any time.

To exercise any of these rights, email privacy@unityvows.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

You may also manage your data directly from your account at Settings → Privacy & GDPR.

9. Cookies

We use strictly necessary cookies to maintain your session and authentication state. We do not use third-party advertising cookies. A cookie consent notice is displayed on first visit; you may withdraw consent at any time by clearing your browser cookies.

10. Children's Privacy

UnityVows is a professional B2B platform intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. International Data Transfers

Our infrastructure is hosted on AWS in the ap-south-1 (Mumbai) region. If you access the platform from outside India, your data may be transferred across borders, and some sub-processors are in the United States, the United Kingdom or the EU. For data covered by the GDPR or UK GDPR we rely on adequacy decisions, the EU–US Data Privacy Framework where the provider is certified, or the EU Standard Contractual Clauses (with the UK Addendum); the safeguard for each provider is on the sub-processor page.

11A. India — Digital Personal Data Protection Act, 2023

If you are in India, you may ask for a summary of your personal data and how it is processed, have it corrected, completed, updated or erased, nominate someone to exercise your rights if you die or cannot act, and withdraw consent where processing relies on it. Our grievance contact is privacy@unityvows.com; we respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India. For wedding data, the planner or couple who entered it is the Data Fiduciary and we act as their Data Processor.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

13. Contact Us

Questions, requests, or concerns about this Privacy Policy should be directed to:
Able Strategies, LLC (d/b/a UnityVows)
23377 Argyle St, Novi, MI 48374, United States
Email: privacy@unityvows.com
Phone: +1 (248) 971-0763