Privacy notice
What BigDaySite keeps about couples, their guests and the photos they share, why we keep it, who helps us run the service, how long it stays, and how to ask us to see or delete it.
Who is responsible
BigDaySite is run by BigDaySite.com. We are responsible for the personal data described here. For anything about your data, write to support@bigdaysite.com.
What we keep
If you organize a wedding
- Your email address, so we can send you sign-in links.
- For 24 hours after you ask for a sign-in link: a record of the request with a scrambled form of your network address, so nobody can flood your inbox.
- Everything you add to your wedding: names, dates, places, the text of your pages and the photos you upload.
- The plan you choose for your wedding, and when you chose it.
- If you invite someone to help organize your wedding: their email address, to send them the invitation, and the role you gave them.
If you are a guest
The couple adds these, not you:
- Your name, your household, which events you are invited to and your arrival time.
- Your contact details, if the couple adds them. We store them encrypted.
- Your replies, and the language you choose for your page.
- Photos and videos you send with the couple's table QR code. We ask nothing about you to send them: your phone gets a random code, kept in your browser, so you can see and remove what you sent from it. With each file we keep a scrambled form of your network address, never the address itself, so that one network cannot use up the space meant for every guest; it is deleted with the file's upload record or the wedding. Photos and videos can carry hidden details such as where they were taken or which phone took them; the copies we show others have them removed.
- The couple sees everything sent. They may choose to share photos and videos with their invited guests or show photos on a screen at the celebration; the sending page tells you before you send.
If you visit bigdaysite.com
Nothing that identifies you. We use no analytics service and no advertising cookies.
Our technical logs record errors and events without names, email addresses or guest details.
Why we use it, and our legal basis
- To run your account and your wedding site, and to send sign-in links: our contract with you.
- To show each guest their own page and take their replies: our contract with the couple, and the legitimate interest of the couple and their guests in getting the right information to the right person.
- To collect, keep and show the photos and videos guests send to the couple, and only where the couple chooses: our contract with the couple, and the couple's legitimate interest in keeping the photos and videos of their wedding.
- To keep the service secure and stop misuse, such as too many sign-in attempts: our legitimate interest.
Who helps us run BigDaySite
- Hetzner Online GmbH (Germany) runs our server in its data centre in Helsinki, Finland.
- Backblaze, Inc. (United States) stores photos, videos, our encrypted database backups and our record of deletions in its EU Central region in Amsterdam, the Netherlands. Backups are encrypted on our server before they are sent.
- Resend (United States) sends sign-in links from its EU region in Ireland, and later the emails to guests that you approve.
- Forward Email (United States) forwards messages you send to our support address to our mailbox.
- ntfy delivers alerts to the person who runs BigDaySite. These alerts never contain personal data: only what happened, where and how many times.
Nobody else receives your data. We never sell it.
Outside the EU
Your data is stored in the EU. Backblaze, Resend and Forward Email are US companies, so US law may apply to them. We use them under their standard data processing terms, which say how they may handle the data they hold for us.
How long we keep it
- Your wedding: until you ask us to delete it. To have a wedding deleted, email support@bigdaysite.com. You can download it first. We do not yet delete weddings automatically when their term ends; before we start, we will tell organizers by email.
- Backups: copies of deleted data expire within 35 days. If we ever restore a backup, we repeat every deletion before the service opens again.
- Sign-in requests: the count of recent requests, with a scrambled form of your network address, for 24 hours. The email carrying your sign-in link is kept 7 days after it was sent, or 7 days after its link expired if it was never sent. A record that a sign-in link was issued, holding only a scrambled form of your email address, stays until you delete your account; if you never opened the link and want it removed, write to us. A signed-in session lasts at most 7 days.
- Team invitations: the invitation email is deleted once the invitation is accepted, declined, withdrawn or expired (after 7 days), and at the latest 7 days after it was sent. While the invitation is open we keep a scrambled form of the address to match it when the person signs in; it is removed when the invitation closes.
- Your plan choices: up to 24 months, then only as daily totals without your details. Deleting your account removes your details at once.
- Billing records: we keep none.
- "Do not contact" requests: when a guest asks not to be emailed, we keep a scrambled form of the address so we keep that promise. No address can be read from it.
Your rights
You can ask us to:
- show you the data we hold about you and give you a copy;
- correct it;
- delete it;
- stop or limit using it;
- send it to you in a form another service can read.
Write to support@bigdaysite.com. We reply within one month. We may ask you to confirm who you are, but never for more than we need. If you are a guest, you can also ask the couple, who can change your details directly.
Complaints
If you think we have handled your data wrongly, please tell us first so we can put it right. You can also complain to the data protection authority in the country where you live or work, or to the one in the country where we are based.
Children
Organizer accounts are for people old enough to make a contract where they live. Children can be guests: the couple adds a child's name and the events they are invited to, and a parent or guardian replies for them. Please ask parents before uploading photos of their children. A parent can ask us to take down any photo of their child.
Changes
When we change this notice, we tell organizers by email about the changes that affect them before they take effect.