Privacy policy
What data Duetto holds, why, where and for how long, and how you can download or delete it.
Provisional text, under legal review before launch.
What data we hold
The account: your name, email address and, if you add them, your phone and Telegram link. The wedding: date, place, budget, tasks, vendors, requests, offers, contracts, messages and the files you upload. Vendors: company details from the public ANAF registry, contact details, packages, portfolio and calendar. Signing a contract: the signer's name, the time, the IP address and the document's fingerprint. Profile view and search statistics do not record who performed the action.
Guests' data
The guest list is entered by the couple, who decide what data goes into it. Guests have no account: they open their invitation through a personal link and answer only for their own household. The answers, the chosen menu, allergies and accommodation or transport needs reach only the couple and the people the couple gave access to the guest list, and are used only for organising the wedding. A guest who wants to see, correct or delete their data should contact the couple or write to us.
Why we use it
So that the platform works: the wedding plan, invitations, the link between couples and vendors, contracts. To send the notifications you choose, on the channels you choose. To keep the platform safe and to verify vendors and reviews. We do not sell data and do not use it for advertising.
Where it is stored
Data and files are stored in the European Union, in Frankfurt, with Supabase, which provides the database, file storage and authentication. Notification emails are sent through an email delivery service, and Telegram messages through Telegram, only if you link your account. Access to data is restricted in the database: everyone sees only their own wedding, their own vendor and what they were explicitly given.
Cookies
We use only the cookies the platform cannot work without: the account session, the chosen language and the current wedding. We use no advertising cookies and no tracking tools from other companies.
How long we keep it
Account and wedding data stay until you delete them or delete your account. Read notifications are deleted after one year, and statistics after two years. A signed contract stays in both parties' records for as long as the other party's account exists.
Your rights
You can see and correct your data on the platform's pages. You can download all your data and delete your account from the Account page, in the “Your data” section. You can ask us to restrict processing, or object to it, by writing to us. If you believe your data is not being used properly, you can contact the Romanian data protection authority (ANSPDCP).
Operator and contact
The operator's full details will be published here before launch.