Data Retention Policy

This page summarises how long Simplyweds keeps different kinds of information and when we delete it. It supplements (and does not replace) our Privacy Policy.

Account

• Active accounts: retained for as long as your account exists.
• Deleted accounts: soft-deleted immediately from the app; hard-purged from primary storage within 30 days, and from encrypted backups within a further 30 days.

Weddings and guest data

• Active weddings: retained while the owning account is active.
• Archived weddings: retained up to 12 months after archival, then hard-deleted.
• Guest households, RSVPs, and shuttle selections: retained for the life of the wedding and deleted with it.
• Guest-uploaded photos: retained for the life of the wedding. Photos an admin rejects come off their public link straight away and are deleted within 30 days.

Payments

• Stripe's own records: Stripe holds the record of any purchase and retains it for as long as tax and accounting law requires of them, up to 7 years. Deleting your Simplyweds account does not, and cannot, delete Stripe's copy.
• Our copy of a payment event: stripped of everything identifying you when you delete your account. What is left is the processor's reference for the event and its type, kept so a redelivered payment notification cannot be processed twice against somebody else.
• Card numbers: never touch our servers, held by Stripe under PCI DSS.
• Planner commission records: kept after the planner's account is deleted, because they are financial records and because they are how a planner gets paid. Deleting the account unlinks it from the record and keeps the planner's name and contact email on it — the two details needed to identify who is owed and to reconnect the earnings to a new account. Nothing else identifying the planner is kept, and the record holds no wedding or guest information. Agreed to in section 5a of the Terms.

Diagnostics and logs

• Sentry error events and masked session replays: up to 90 days.
• Edge function request logs: up to 30 days.
• Email send log, suppression list, and dead-letter queue: retained under our email provider defaults; DLQ entries prune after 30 days. Our own copy of the send log, and any unused unsubscribe link, is deleted when the account belonging to that address is deleted. The suppression list is the deliberate exception: a bounce or an unsubscribe outlives the account, because losing it would mean emailing that address again.

Text messages

• Texts sent to your guests, and their replies: retained for the life of the wedding and deleted with it, phone numbers and message bodies included.
• A reply we cannot match to a wedding: not recorded at all.
• The do-not-text list: a number that replies STOP stays on it permanently. That record is what stops us texting the number again, so it outlives every wedding.

AI features

• AI conversations and messages: retained according to the TTL surfaced in your workspace (default: soft-deleted after 30 days of inactivity, hard-purged 30 days later).
• AI attachments: deleted with their parent conversation, and with the wedding: the stored file itself, not only the record of it.
• See our AI subprocessors page for who sees what.

Backups

Encrypted database backups are retained on a rolling window of up to 30 days. Deletions you make in the product propagate to primary storage immediately and roll out of backups within that window.

Requests

To request export or accelerated deletion of your data, email legal@simplyweds.com or use the tools inside your account settings.