Brideway Privacy Policy

Effective Date: June 1, 2026

This Privacy Policy explains how ABR Digital Brands Solutions LLC, a Wyoming limited liability company ("Brideway", "we", "us"), handles personal data in the Brideway wedding-planning platform at getbrideway.com (the "Service"). This policy is designed for an international customer base and may be supplemented by jurisdiction-specific notices where required by law.

1. Who This Policy Covers and Our Role

The Service may involve planners and their team members; couples who receive a portal login from a Planner; guests, family members, wedding-party members, vendor contacts, and other people whose information a Planner records; and prospective customers who have not yet created an account.

Our role depends on the data. For Planner account, subscription, billing, support, security, prospect, and similar Brideway business records, Brideway generally acts as a controller because we determine the purposes and means of processing. For wedding data a Planner enters about couples, guests, vendors, and events ("Customer Data"), the Planner is generally the controller and Brideway acts as processor, service provider, or equivalent role under the applicable law and the Terms of Service. For portal authentication and security information, Brideway may act as an independent controller where it determines the purposes and means required for authentication, fraud prevention, or security.

If you are a couple, guest, vendor contact, or another person whose information was entered by a Planner, please contact the Planner first about your Customer Data. Brideway will assist the Planner and may respond directly when appropriate or required by law.

2. What We Collect

From Planners and team members: name, business name, email address, phone number, password or authentication credential information maintained by the sign-in provider, optional profile information, subscription plan, account and billing status, and records of when terms or notices were accepted.

Customer Data entered by Planners may include:

couple details such as names, contact information, parents’ names, officiant, wedding date, venue, budget, and currency;
guest details such as names, relationship, side, contact details, RSVP status, dietary requirements, meal choices, table and room assignments, and notes;
wedding-party roles, tasks, schedules, seating and rooming plans, and wedding-day rundowns;
vendor details such as business names, contact persons, phone numbers, email addresses, websites, notes, quotes, fees, and links to vendor pamphlets and price lists;
payment records entered by users, such as amounts, due dates, payment methods, paid status, and links to payment proofs or receipts; and
links to documents stored elsewhere, such as Google Drive. For the current MVP, Brideway stores and displays the link and related metadata rather than the underlying third-party file.

Brideway does not monitor or verify payments between couples and vendors and does not access or reconcile the Planner’s or couple’s bank accounts for those vendor payments. Payment records in the Service are user-entered business records.

Sensitive information may appear in Customer Data if a Planner chooses to enter it. Dietary requirements can reveal health information or religious beliefs. Brideway asks Planners to record only information genuinely needed for the event and to avoid entering government IDs, passwords, payment-card security codes, full card numbers, bank-account credentials, or other unnecessary secrets.

From couples with a portal login: email address, authentication information, and the Customer Data the Planner makes available through the portal.

From prospective customers: business name, contact name, work email, phone number, professional role, demo activity, correspondence, and other information voluntarily provided or obtained from publicly available professional sources. We may maintain these records in our customer-relationship tools.

2.1 Automatically Collected Information

sign-in cookies and other strictly necessary technologies used to keep you logged in;
IP address, browser and device characteristics, pages or features requested, timestamps, and server/security logs;
error and performance diagnostics, which may include page, browser, device type, error details, and a random account identifier when you are signed in so we can identify which account a problem affected;
audit records showing certain administrative or sensitive changes, such as subscription or account-status changes; and
communications you send to us, including support requests, feedback, and attachments such as screenshots. Session replay is not currently enabled. If we introduce it, we will update this policy and implement any legally required notice or consent before using it.

2.2 Cookies and Similar Technologies

We use technologies reasonably necessary for the Service, such as session authentication cookies and browser local storage for interface preferences. We do not currently use advertising cookies or third-party advertising trackers. If we introduce analytics, advertising, or other non-essential tracking technologies, we will update this policy and obtain consent where required by law.

3. How We Use Personal Data

to provide, operate, secure, maintain, support, troubleshoot, and improve the Service;
to authenticate users and prevent fraud, misuse, and unauthorized access;
to administer subscriptions, billing, account status, and customer support;
to send service communications such as password resets, security notices, and important changes;
to maintain business, tax, accounting, legal, audit, and dispute-resolution records;
to enforce our terms and protect the rights, property, or safety of Brideway and others;
to comply with applicable laws, regulations, court orders, and governmental requests; and
to manage prospective customer relationships and lawful business-development outreach.

For Customer Data processed on behalf of a Planner, we process that data only for the purposes described in the Planner’s instructions, the Service configuration, the Terms of Service, and Annex A, unless applicable law requires otherwise.

We may use aggregated or deidentified information that no longer reasonably identifies an individual, wedding, or customer for security, analytics, service improvement, benchmarking, capacity planning, and other legitimate business operations, subject to applicable law. We do not sell Customer Data or use Customer Data for targeted advertising.

Where applicable law requires a legal basis, the basis may include performance of a contract, legitimate interests, compliance with a legal obligation, consent, or another lawful basis recognized by the applicable jurisdiction. For Customer Data, the Planner is primarily responsible for establishing the lawful basis and providing required notices or obtaining required consents from individuals.

4. Who We Share Personal Data With

We may disclose personal data to:

other users authorized by a Planner, such as couples with access to their own wedding portal and Planner team members who are given access;
service providers that host or operate parts of the Service for us and are contractually restricted in their use of data, including Supabase (database, authentication and file storage; Singapore), Vercel (application hosting; Singapore processing with global content delivery), Sentry (error monitoring; United States), Resend (service email delivery; United States), Zoho (email/support and customer-relationship records; United States), payment processors such as Stripe, PayPal, or Wise when you choose to pay a Brideway subscription;
GitHub is used for source-code storage and development. Brideway does not intend to store Customer Data in GitHub, and GitHub is not a subprocessor for Customer Data in the ordinary operation of the Service.
third-party services that you or a Planner choose to connect or link to, such as Google Drive or communication tools, as necessary to operate the requested connection. We store links and related metadata rather than controlling the underlying third-party content unless a specific Brideway feature states otherwise;
government authorities, regulators, courts, law-enforcement agencies, or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, property, or Service security; and
a successor, buyer, financing party, or other counterparty in a merger, acquisition, financing, restructuring, or sale of assets, subject to applicable law.

Payment processors receive payment information directly when you use them. Brideway does not intentionally store full payment-card numbers. Brideway does not receive, hold, or process vendor payments made between couples and vendors.

5. International Transfers

Brideway is based in the United States. The Service uses infrastructure and providers in multiple countries, including Singapore and the United States. Personal data may therefore be accessed or processed outside the country where it was collected.

We use transfer mechanisms and safeguards required by applicable law. For Customer Data subject to Indonesian law, the Planner as controller remains responsible for selecting and documenting the lawful basis for transfers outside Indonesia, while Brideway will provide reasonably available information about its processing locations and contractual safeguards to support that assessment. For transfers subject to EU or UK data-protection law, we may use applicable transfer tools such as the European Commission Standard Contractual Clauses, UK transfer mechanisms, adequacy decisions, or another lawful mechanism, as appropriate.

Because Brideway is an international SaaS provider, exact transfer arrangements may evolve as infrastructure and service providers change. Material changes will be reflected in the applicable subprocessor or privacy disclosures where required.

6. How Long We Keep Personal Data

Planner account data is retained while the account is active and generally for up to ninety (90) days after closure, unless longer retention is required for legal, tax, accounting, fraud-prevention, security, or dispute-resolution purposes.

Customer Data is retained while the Planner’s account is active. After termination, the Planner has a thirty (30)-day export period. Brideway then deletes Customer Data from active production systems within ninety (90) days, except where law requires retention. Backup copies may persist for the normal backup lifecycle and remain protected during that period.

Logs and diagnostics are retained according to operational needs and provider settings, generally for periods ranging from thirty (30) to ninety (90) days, subject to legal or security requirements.

Support and prospect records are retained for as long as reasonably necessary to provide support, manage the business relationship, document communications, resolve disputes, comply with legal obligations, or evaluate legitimate business opportunities, subject to applicable law and our internal retention practices.

7. Security

We use administrative, technical, and organizational safeguards appropriate to the nature of the information, which may include HTTPS/TLS encryption in transit, logical isolation between customer environments, access controls, authentication safeguards, limited staff access, logging and audit trails, backup and recovery measures, vulnerability management, and incident-response procedures. Specific controls may evolve as the Service evolves, provided that overall safeguards remain appropriate to the risk.

No method of transmission or storage is completely secure. If Brideway becomes aware of a personal-data breach affecting Customer Data, we will notify the relevant Planner without undue delay and, where reasonably practicable, within twenty-four (24) hours. We will cooperate with legally required notifications. Where required by applicable law, we will also notify regulators and affected individuals within the legally prescribed timeframe.

8. Your Rights

Depending on where you live and the law that applies, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal data, withdraw consent where consent is the basis for processing, or complain to a data-protection authority. Some rights are subject to legal exceptions and verification requirements.

If your information is Customer Data entered by a Planner, the Planner is ordinarily responsible for responding to your request because it is the controller. Contact the Planner first. We will assist the Planner and may respond directly where appropriate or required by law.

For data Brideway controls directly, including Planner account data, prospect data, and certain support or security records, you may contact us at support@getbrideway.com. We will respond within the time required by applicable law and may need to verify your identity before acting on a request.

9. Children

The Service is intended for adults who run or support wedding-planning businesses and for adult couples using the portal. We do not knowingly maintain accounts for children. A Planner may record limited information about children who are guests or members of a wedding party where necessary for event planning, but the Planner is responsible for ensuring that its collection and use of children’s information complies with applicable law and obtaining any required parental or guardian authorization.

10. Prospective Customers and Direct Outreach

Brideway may contact a small number of hand-picked prospective planners about the Service, including by email, and may provide a demo account or introductory materials. We may process professional contact information, business details, correspondence, and demo activity for legitimate business development, security, and support purposes. We will honor applicable opt-out, direct-marketing, and electronic-communications requirements. This section also covers prospect information stored in our customer-relationship tools.

11. Indonesia-Specific Compliance

Brideway may offer the Service to planners and other users in Indonesia. Where Indonesian law applies, Brideway will take reasonable steps to identify and comply with applicable obligations governing electronic systems and personal data, including registration, security, breach-response, and transfer requirements. Indonesian customers may receive additional disclosures or contractual terms, including an Indonesian-language version, where required by law.

Publication of this Privacy Policy does not mean that every regulatory registration, permit, designation, representative, or other local requirement has been satisfied. Availability and operations in each jurisdiction remain subject to applicable law and regulatory requirements, and Brideway may restrict or modify the Service where reasonably necessary to comply with law or regulatory direction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version and effective date. If we make a material change that affects how we use personal data in a way that requires notice, we will provide notice by email, through the Service, or by another legally permitted method before the change takes effect.

13. Contact

ABR Digital Brands Solutions LLC
30 N Gould St Ste N, Sheridan, WY 82801, United States
support@getbrideway.com

Where required by applicable law, Brideway may designate a data protection officer, representative, or other local contact and will publish the applicable contact information.