How Everlly protects your wedding and guest data
Everlly stores wedding and guest data in encrypted Microsoft Azure Cosmos DB databases and encrypts data in transit with TLS. It uses guest details only to run your planning and send invitations on your behalf, and it never sells personal data or uses it for unrelated advertising. You can ask for access, correction, export or deletion at privacy@everlly.ai.
What Everlly stores
- Account details: name, email, role and the profile details you add.
- Wedding data you enter: date, venue, guest list (names, contact details, dietary preferences, RSVP status), seating and budget.
- Invitations and replies: recipients' contact details and their responses, so answers sync with your guest list.
- Anonymized product analytics, such as pages visited and features used.
- Payments are handled by a third-party payment provider; Everlly does not store full card numbers.
How guest data is used
Guest contact details are used to send the invitations and RSVP requests you ask Everlly to send, and replies are used to update your guest list. Guest data is not sold and is not used for advertising.
Invitations are sent from Everlly's WhatsApp business number and email domain. The Everlly team reviews each send before it reaches guests, and the Terms of Service forbid using Everlly to spam.
Service providers
Everlly uses a small set of providers that process data only on Everlly's instructions:
- Microsoft Azure — cloud infrastructure and database
- Twilio — WhatsApp messaging
- Azure Communication Services — email delivery
- A third-party payment provider — subscription payments
AI features
AI features such as planning assistance, seating and floor-plan reading use your event data — guest list, preferences and relationships — to produce suggestions. The suggestions are recommendations; you stay in control of the final decisions.
Security
- Data at rest is stored in encrypted Azure Cosmos DB databases.
- Data in transit is protected by TLS/HTTPS.
- Access to production systems is restricted and monitored.
- If a breach affects your personal information, Everlly will notify you as required by law.
Retention and your rights
Account data is kept while your account is active. If you delete your account, personal data is deleted within 30 days, except where the law requires otherwise (for example, financial records).
You can ask to access, correct, export, restrict or delete your data by writing to privacy@everlly.ai. Everlly responds within 30 days.