Privacy Policy

Effective October 31, 2026

This is a translation. The Vietnamese version is the original and prevails in case of any difference.

Wedify takes the protection of personal data seriously and respects your privacy. This policy explains how Wedify collects, uses, shares and protects personal data when you visit our website, use the app or view a shared album, and the rights you have over that data. It is written under Vietnamese personal data protection law (Decree 13/2023/ND-CP) and with reference to the EU General Data Protection Regulation (GDPR).

1. Who we are

The controller of Wedify users’ personal data is [TÊN CÔNG TY / COMPANY NAME] (tax code [MÃ SỐ THUẾ / TAX CODE]), [ĐỊA CHỈ TRỤ SỞ / REGISTERED ADDRESS].

Our personal data protection team handles questions and requests by email at support@wedify.art, or by post to the address above marked “Personal data protection”.

2. Wedify’s two roles

For your account data (studio, photographer, members), Wedify is the controller under this policy.
For data about your clients and the photos you upload, the studio is the controller and Wedify only a processor acting on the studio’s instructions. If you are a client of a studio that uses Wedify, please contact that studio to exercise your rights; we will help the studio where needed.

3. Data we collect

Account information: name, email, password (stored as a one-way hash), studio name and address, member roles.
Business profile you enter: legal name, tax code, address, representative, bank account, signature.
Content: photos, videos, contract templates, contracts, receipts, notes.
Client data entered by studios: names, phone numbers, emails, addresses, roles (bride, groom…), appointments, payments, proofs of payment.
Technical data: IP address, browser and device type, access times, error and security logs.
Billing data for paid plans: invoice details and transaction history. Card numbers are handled by the payment provider; Wedify does not store full card numbers.

We do not knowingly collect sensitive personal data. Photos may show people’s faces, but Wedify does not use facial recognition or biometric analysis.

4. Purposes and legal bases

Providing the Service: accounts, photo storage and delivery, projects, contracts and payments — to perform our contract with you.
Sending necessary emails: sign-in verification, member invitations, password resets, receipts sent to clients at the studio’s request.
Security, fraud and abuse prevention, troubleshooting — for our and our users’ legitimate interests.
Billing, invoicing and keeping accounting records — to perform our contract and meet legal obligations.
Improving the Service using aggregated, non-identifying statistics.
Sending product news or offers — only with your consent, which you can withdraw at any time.

We do not sell personal data and do not use it for targeted advertising.

5. Legal basis for processing

We only process personal data when there is an appropriate legal basis:

Performance of a contract: when the data is needed to provide the Service you signed up for or to answer contract-related requests (Article 17 of Decree 13/2023/ND-CP; Art. 6(1)(b) GDPR).
Consent: when we ask your permission for a specific activity, such as receiving product news. You can withdraw consent at any time (Article 11 of Decree 13/2023/ND-CP; Art. 6(1)(a) GDPR).
Legal obligation: when the law requires it, such as keeping accounting records or providing information to competent authorities (Art. 6(1)(c) GDPR).
Legitimate interests: for activities such as keeping systems secure, preventing abuse and fixing problems, always weighed so they don’t unduly affect your rights (Art. 6(1)(f) GDPR).

6. When you visit our website

When you only browse our website, without signing up or sending us information, the servers and content delivery network of our infrastructure provider record some technical information (access logs):

Your device’s IP address.
Browser type and version, browser language and operating system.
Date and time of access and the page visited.
The page you came from (if your browser sends it).
The amount of data transferred and the server’s response code.

This information is needed to display the website, keep it stable and protect it against attacks. We don’t use it to identify you and don’t combine it with other data. Logs are kept for the limited time set out under Retention.

7. When you contact us

When you use the Contact support form on our website, we receive your name, email, topic and message, plus the language and the page you sent it from. The message is delivered to our support inbox through Amazon SES. Your IP address is used to limit how often messages can be sent, against spam, and appears in our server’s technical logs, which are kept for 30 days like those of any other request.

When you email support@wedify.art, we keep your email address, the message and any information you provide in order to answer and handle your request.

Our website has a Messenger button for messaging Wedify’s Facebook page. When you click it, you are taken to Messenger and the conversation takes place on Meta Platforms’ service, under Meta’s privacy policy. Our website does not load Meta tracking code before you click.

Contact data is deleted once your request has been fully handled and no further communication is needed, unless the law requires us to keep it longer.

8. Sign-up and studio accounts

To use Wedify, you create an account. When you sign up, we ask for your first and last name, email address, account type (studio or photographer) and the studio address you want on Wedify. You sign in with a password or with a sign-in link sent by email.

Account owners can invite members by email; invited people create their own accounts. Each member only sees the data that fits their role.

This data is processed to perform our contract with you. When paid plans launch, payments will be handled by a payment provider; we will update this policy with the provider’s name before any fees are charged.

9. When you view a shared album

If a studio sends you an album link, you can view the photos without creating an account. In that case, besides the access logs above, we process:

An album access token stored on your device after you enter the correct password (if the album has one).
What you do in the album: color flags, hearts, comments, drawings and photos you upload (if the studio allows it).
The display name you enter when commenting.

This data belongs to the studio’s album. The studio is the controller and Wedify processes it on the studio’s behalf; to exercise your rights, contact the studio directly, and we will help the studio where needed.

10. Emails we send

We send emails needed to use the Service, such as sign-in links, account confirmation, password resets, member invitations and notices sent at a studio’s request. Emails are sent through Amazon Simple Email Service (Amazon SES).

We don’t currently send marketing newsletters. If we do in the future, we will only send them with your consent, and every email will include a way to unsubscribe.

12. International transfers

Data is stored mainly in Amazon Web Services data centres in Singapore; photos may be cached at content delivery locations near viewers worldwide. We complete the formalities for transferring personal data abroad under Vietnamese law and apply appropriate safeguards (such as standard contractual clauses) for data of users in Europe.

13. Retention

Account data and content: for as long as the account is active.
Photos and data you delete: moved to the trash (where available), then deleted permanently; backups are cleared within 90 days.
When an account is deleted: data is deleted within 30 days, except backups (up to 90 days) and data we must keep by law.
Invoices and accounting records of paid plans: for the period required by accounting and tax law.
Security logs: up to 12 months.

14. Security

We use appropriate technical and organisational measures: encryption in transit (HTTPS), encryption at rest, one-way hashed passwords, private document storage, time-limited download links, role-based access and restricted internal access. No system is perfectly secure; if a personal data breach occurs, we will notify the competent authority and affected people within the time required by law (no later than 72 hours for the authority).

15. Your rights

Under Vietnamese law and the GDPR (where it applies), you have the right to:

Be informed about processing and access a copy of your data.
Have inaccurate data corrected.
Have data deleted, restrict processing or object to it.
Withdraw consent at any time (without affecting earlier processing).
Receive your data in a machine-readable format (data portability).
Complain to a competent authority: in Vietnam, the personal data protection authority under the Ministry of Public Security; in Europe, the supervisory authority where you live.

Send requests to support@wedify.art. We reply within the time required by law (usually within 30 days) and may need to verify your identity first.

16. Cookies and browser storage

Cookies are small files a website stores on your device to remember information between visits. Browser storage (local storage and session storage) similarly lets a website keep some settings on your device. Cookies cannot run programs or carry viruses onto your device.

Wedify only uses cookies and browser storage that are needed to run the service:

The “wedify_language” cookie (kept for up to 1 year, shared across Wedify’s pages): remembers the language you chose.
Studio sign-in: an access token kept in browser storage so you don’t have to sign in again; it is removed when you sign out.
Client album access: an access token per album kept on the client’s device so the password isn’t needed again; it stops working when the studio changes the password or link, or signs out all guests.
Comment display name: the name a client entered is remembered on the device for their next comment.
Interface settings: language, light/dark mode, album view and sidebar state.
Upload progress: kept temporarily in the browser session so uploads can resume after a dropped connection.

Because this data is needed for the service to work, we don’t show a cookie consent dialog. You can delete cookies and site data at any time in your browser settings; you will then need to sign in or enter album passwords again.

17. Third-party content on our website

Some content on our website is loaded from third-party servers. When that happens, your browser sends your IP address and browser information to the provider:

Fonts from Google Fonts (Google LLC).
The introduction video on the home page, loaded from the video provider’s server.
Images and app pages delivered through Amazon Web Services’ content delivery network.

Data processing by these parties is governed by their own privacy policies.

18. Analytics and advertising tools

Wedify does not currently use Google Analytics, Google Tag Manager, Meta advertising pixels, Google Ads or similar tracking and behavioral analytics tools on its website or app.

If we use such tools in the future, we will update this policy first and only enable them with your consent.

19. Children

The Service is not meant for people under 16 to create accounts. Photos of children uploaded by a studio are the studio’s responsibility, including obtaining the consent of parents or guardians where required.

20. Changes to this policy

We may update this policy. The effective date is shown at the top of the page; for material changes we will notify you by email or in the app before they apply.

21. Contact

[TÊN CÔNG TY / COMPANY NAME] — Tax code: [MÃ SỐ THUẾ / TAX CODE]

Address: [ĐỊA CHỈ TRỤ SỞ / REGISTERED ADDRESS]

Email: support@wedify.art