1. Who We Are
Artzyfy ("we", "us", "our") operates the website artzyfy.com and sells digital wedding invitation templates through our Etsy shop (etsy.com/shop/Artzyfy). We are the data controller responsible for your personal information collected through this website.
2. Information We Collect
Invitation content you provide: bride and groom names, wedding date and time, venue name and address, cover photo, gallery images, love story, background music URL, and any custom message.
Contact details entered at publish time: your name and email address, used solely to send you your private edit link.
Guest RSVP data: names, attendance confirmation, guest count, and personal messages submitted by your guests through the RSVP form on your invitation.
Technical data: anonymised IP address (used only for rate-limiting draft creation), browser type, and approximate usage times — collected via standard server logs. We do not use analytics tracking scripts.
Cookies: a single session cookie ("artzyfy_draft_session") is set when you start editing an invitation. It contains only your draft session token and expires after 30 days. We do not use advertising or third-party tracking cookies.
3. How We Use Your Information
To create and host your digital wedding invitation at a unique public URL.
To send you your permanent private edit link via email when you publish your invitation.
To display RSVP responses collected from your guests back to you through your edit dashboard.
To prevent abuse of our free draft creation system through rate-limiting based on IP address.
We never sell, rent, or share your personal information with third parties for marketing purposes.
4. Third-Party Services
Supabase (supabase.com) — our database and file storage provider. Your invitation data, uploaded photos, and RSVP responses are stored on Supabase infrastructure. Supabase is hosted on AWS in the US. Their privacy policy is available at supabase.com/privacy.
Resend (resend.com) — our email delivery provider. We share your name and email address with Resend solely to deliver your edit link email. Their privacy policy is at resend.com/legal/privacy-policy.
Etsy (etsy.com) — our sales platform. When you purchase a template on Etsy, your transaction is governed by Etsy's Privacy Policy and Terms of Service. We receive only the information Etsy provides to sellers (your name and, if you message us, your Etsy username).
Google Maps — embedded maps on invitation pages use Google's legacy free embed (no API key). Viewing an embedded map is subject to Google's Privacy Policy.
5. Data Storage and Security
Your invitation data is stored in a Supabase PostgreSQL database protected by Row Level Security (RLS). Uploaded photos and audio files are stored in Supabase Storage with scoped access controls. Access to your invitation after publishing is protected by a long random token in the URL. We strongly advise you to keep your edit link private, as anyone with the link can modify your invitation. We implement reasonable technical and organisational measures to protect your data, but no system is perfectly secure. We will notify you promptly if we become aware of any breach affecting your personal data.
6. Data Retention
Draft invitations (not yet published) are retained for 30 days of inactivity and then automatically deleted. Published invitations remain live indefinitely so that your guests can continue to access them. If you wish to have your invitation and associated data deleted, please contact us via our Etsy shop and we will action your request within 14 days. RSVP data is retained as long as your invitation is live, or until you request deletion.
7. Your Rights
Right to access — you can request a copy of the personal data we hold about you.
Right to rectification — you can correct inaccurate data at any time via your edit link.
Right to erasure — you can request deletion of your invitation and all associated personal data.
Right to restriction — you can ask us to restrict processing of your data in certain circumstances.
Right to data portability — you can request your data in a structured, machine-readable format.
To exercise any of these rights, contact us through our Etsy shop. We will respond within 30 days.
8. Children's Privacy
Artzyfy is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. International Data Transfers
As our infrastructure providers (Supabase, Resend) operate primarily from the United States, your data may be transferred to and processed in the US. Where required by law, such transfers are made subject to appropriate safeguards.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date. For material changes, we will make reasonable efforts to notify affected users. Continued use of artzyfy.com after changes constitutes acceptance of the revised policy.
11. Contact Us
For any privacy questions, data access requests, or deletion requests, please contact us through our Etsy shop at etsy.com/shop/Artzyfy. We aim to respond to all enquiries within 5 business days.