Skip to content
Early access: Get 15% OFF Pro at launch. Join the waitlist
Loverisse
Log inJoin

Privacy

Privacy policy

Version 2 · last updated 3 November 2026

1. Who we are

Loverisse is a service for creating wedding websites, invitations and RSVPs, and for managing guest lists. It is operated by Maestral Technologies LLC, a Wyoming limited liability company (“we”, “us”).

Registered office: 30 N Gould St, Ste R, Sheridan, WY 82801, United States.

For any privacy question or request, email business@maestral.tech. Please write to us by email rather than to the registered office address.

2. What this policy covers, and our two roles

Depending on whose data it is, we act in one of two roles:

  • Controller. We decide how and why data is used for our website, the waitlist, Loverisse accounts, payments, service emails, security and running the service. This policy describes that processing.
  • Processor (service provider). When a couple uses Loverisse to build a wedding website, keep a guest list and collect RSVPs, the couple decides whom to invite and what to collect. We process that guest data on their behalf and on their instructions, only to provide the service to them. If you are a wedding guest, the couple is responsible for your data; you can contact them directly, or write to us and we will pass your request on and help them answer it.

3. Data we collect

Website visitors

Anonymous usage measurements on our public pages (see section 9), and technical data our hosting provider processes to deliver pages and protect the service, such as IP address and browser information.

Waitlist

When you join the waitlist we process:

  • your email address;
  • your choices: the required launch notification and, separately, the optional product news, with the time you agreed and the version of the wording you saw;
  • which form you used and, if the page address contained them, campaign tags (for example “utm_source”);
  • when you clicked the confirmation link;
  • salted hashes of your email and IP address, used only to limit repeated sign-up attempts.

Accounts

  • your name and email address, and whether the email is verified;
  • your password, stored only as a one-way hash, never in readable form;
  • sign-in sessions, including the IP address and browser information of each session;
  • your preferences (for example dashboard language and email notifications);
  • your role in the weddings you belong to, team invitations you send or accept, and a log of important actions.

Weddings and websites (on behalf of the couple)

  • wedding details: names of the couple, date, venue, time zone, website address and content, photos you upload;
  • the guest list: names, optional spelling variants, group, side, age group, number of plus-ones, RSVP status, dietary notes, allergies, notes and email address, as entered by the couple;
  • RSVP answers submitted by guests: names, attendance, plus-ones, dietary notes, an optional message and contact details, and their email choices. Allergy information is only accepted with the guest’s explicit consent on the form. We also store a salted hash of the IP address to limit abuse.

The public wedding website never shows who is on the guest list, and every guest sees the same thank-you page.

Payments

Pro is a one-time purchase. When payments are available, card details are entered on Stripe’s page and never reach our servers. We keep a record of the purchase (amount, currency, status and Stripe references) and of refunds or disputes.

4. Why we use it, and our legal bases

For readers in the EU, EEA and UK, our legal bases under the GDPR are:

  • Providing your account and the service, including service emails such as verification, password reset, team invitations and purchase confirmations: performance of our contract with you (Art. 6(1)(b)).
  • Waitlist emails: your consent, given separately for each purpose (Art. 6(1)(a)):
    • Launch notification, required to join: “Email me when Loverisse launches, including my early-access code for 15% off Pro.” This means emails about our launch, including your early-access code for 15% off Pro.
    • Product news, optional and unticked by default: “Also send me occasional product news and wedding-planning ideas from Loverisse. Optional.”
  • Security, abuse prevention and rate limiting, and aggregate analytics of our public pages: our legitimate interests in keeping the service safe and understanding how it is used (Art. 6(1)(f)).
  • Keeping payment and tax records: our legal obligations (Art. 6(1)(c)).

For guest data we process on a couple’s behalf, the couple determines the legal basis. Where guests give allergy information, the RSVP form asks for their explicit consent.

We never sell personal data and we don’t use it for advertising.

5. Waitlist confirmation and unsubscribing

We first send a confirmation email. You are only added to our lists after you click its link. If you don’t, nothing more is sent. You can withdraw either consent at any time with the unsubscribe link in every email or by writing to us. Withdrawing doesn’t affect emails already sent.

6. Service providers

We use these providers to run Loverisse. Each acts on our instructions:

  • Vercel (USA) hosts the website and application in its EU (Frankfurt) region.
  • Neon hosts our database in Frankfurt.
  • Brevo (France) stores the waitlist and sends the confirmation, launch and news emails.
  • Resend sends service emails (verification, password reset, team invitations, purchase confirmations).
  • Cloudflare stores photos uploaded to wedding websites (R2 storage).
  • PostHog provides privacy-friendly analytics from its EU cloud (see section 9).
  • Stripe processes payments for Pro, once payments are available.

7. International transfers

We are a US company, and some of our providers are based in the USA. Where personal data from the EU, EEA or UK is transferred to or accessed from the USA or another country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or the EU–US Data Privacy Framework where the recipient is certified. You can ask us for more information about these safeguards.

8. How long we keep data

  • Waitlist: launch-notification data is kept until the launch invitation and its code have expired, then deleted within six months unless you have also chosen product news. Product-news data is kept until you unsubscribe.
  • Accounts: for as long as your account exists. You can ask us to delete your account at any time by email.
  • Wedding and guest data: for as long as the couple keeps the wedding on Loverisse, or until they ask us to delete it.
  • Payment records: for as long as the law requires us to keep them.

9. Cookies, browser storage and analytics

Public pages. We measure visits with PostHog in cookieless mode. No cookies are set, and nothing is stored in your browser’s local or session storage. PostHog derives a pseudonymous identifier from your IP address and browser details on its own servers; it isn’t stored in your browser. Session recording is switched off, and the email you type is never sent to analytics. We record which pages are viewed, which buttons are used and whether a sign-up succeeded. If your browser sends a Do Not Track signal, we don’t measure your visit. You can also object at any time by writing to us.

Signed-in areas. When you sign in we set a strictly necessary session cookie that keeps you signed in. It is not used for analytics or advertising.

Browser storage. Wedding websites remember on your device that you have already seen the envelope opening, so it isn’t replayed on every visit. The setup flow and dashboard keep some progress and display choices in your browser. This information stays on your device.

10. Security

We protect data with measures including encrypted connections (HTTPS), passwords stored only as one-way hashes, secure session cookies, single-use team invitation links stored as hashes, rate limits on sign-in and forms, and access controls that limit each wedding’s data to its members. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the authorities as the law requires.

11. Your rights

EU, EEA and UK. You can ask for access to your data, its correction or deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to a supervisory authority, for example in Hungary the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu), or the authority where you live or work.

United States. Depending on the state you live in, you may have rights to know what personal data we hold about you, to access, correct or delete it, and to opt out of its sale or use for targeted advertising. We don’t sell personal data or use it for targeted advertising. We will not discriminate against you for using your rights.

12. Making a request

Email business@maestral.tech from the address linked to your account or waitlist subscription, and tell us what you would like us to do. We may ask for information to confirm your identity. We answer within one month (GDPR) or the time your local law requires. If you are a wedding guest, tell us which wedding your request concerns; we will forward it to the couple and assist them.

13. Children

Loverisse accounts are for adults. Couples may list children as guests; that data is handled on the couple’s behalf as described above.

14. Changes

When this policy changes, we update the version and date above. If a change affects what you agreed to, we’ll ask again rather than assume.

← Back to Loverisse