Privacy Policy

1. Who we are

WedPro Studio ("we", "us", "our") is operated by WedPro CEO Ltd, a company providing software tools for wedding industry suppliers in the United Kingdom. For any privacy questions, contact us at info@wedproceo.com.

We are the data controller of the personal data described in this policy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What we collect

• Account data: your name, email address, password (hashed), and login activity.
• Billing data: subscription plan, billing status, and payment references. Card details are handled by Stripe and never stored on our servers.
• Business Brain data: information you provide about your business, ideal clients, and brand voice.
• Usage data: the outputs you generate, feedback you submit, and basic technical logs (IP address, browser, timestamps) used for security and service improvement.

3. How we use your data

We process your data to:

• Provide and personalise the WedPro Studio tools.
• Manage your account, subscription, and billing.
• Send essential service emails (account, billing, security).
• Improve, secure, and troubleshoot the platform.
• Comply with our legal obligations.

Our lawful bases are: performance of the contract with you, legitimate interests in running and improving our service, your consent where required, and compliance with legal obligations.

4. How we store your data

Your data is stored on secure, encrypted servers within the UK or European Economic Area, using trusted infrastructure providers (including Supabase and Cloudflare) under appropriate data processing agreements. Access is restricted to authorised WedPro Studio staff only where strictly necessary.

We retain your data for as long as your account is active. If you close your account, your data is permanently deleted within 30 days, except where we are required to retain limited records for legal, tax, or accounting purposes.

5. Your Business Data and AI Processing

The information you share with your Business Brain - including details about your business, your ideal clients, and your brand voice - is stored securely in your private account and is never visible to other users.

Your data is processed by our AI systems solely for the purpose of generating personalised outputs for you. It is not used to train AI models, shared with third parties, or used for any purpose other than powering your WedPro Studio tools.

You can update or delete your Business Brain data at any time from within your account. If you close your account, all your data is permanently deleted.

WedPro Studio is fully committed to UK GDPR compliance. Your data is stored on secure, encrypted servers and is only accessible to you and authorised WedPro Studio staff where strictly necessary to provide support.

6. Third parties we use

We use a small number of trusted sub-processors to deliver the service. Each is contractually required to handle your data lawfully and securely:

• Supabase - database and authentication.
• Cloudflare - hosting and security.
• Stripe - payment processing.
• Resend - transactional email delivery.
• OpenAI and other AI providers - generating personalised outputs from prompts you submit.
• Google - website analytics (Google Analytics), only if you accept analytics cookies.
• Microsoft - recording how visitors use our pages (Microsoft Clarity), only if you accept analytics cookies.
• Meta - advertising measurement and optimisation (Meta Pixel and, when configured, Conversions API), only after you accept analytics and advertising cookies.

We do not sell your data, and we do not transfer it outside the UK/EEA without appropriate safeguards. The only advertising measurement is the Meta Pixel described in section 9, which loads only after your explicit analytics and advertising acceptance.

7. Google user data (Visibility feature)

WedPro Studio includes an optional feature called Visibility. If you choose to connect your Google account, we access a limited set of Google user data on a read-only basis. Connecting Google is entirely optional and you can disconnect at any time.

What Google data we access

• Google Analytics (read-only): aggregated traffic statistics for the website property you select, such as sessions, users, page views, traffic sources, and top pages.
• Google Search Console (read-only): search performance data for the property you select, such as impressions, clicks, average position, and top search queries and pages.
• Basic Google account identifiers: your email address and the list of Analytics/Search Console properties you have access to, so you can choose which property to connect.

We never request write access. We cannot change, publish, or delete anything in your Google Analytics or Search Console accounts, and we do not access Gmail, Contacts, Calendar, or any other Google service.

Separately, the Nurture tool has an optional Connect Google Drive button. It uses Google's drive.file permission, which only covers files WedPro Studio creates for you or files you choose to open with it. It cannot see the rest of your Drive.

Why we access it

Solely to display your own website traffic and search performance back to you inside WedPro Studio, so you can see how your marketing is performing alongside your other Studio tools. This data is shown only to you, in your own account.

How it is stored and shared

We store the OAuth tokens needed to refresh your connection and a cached copy of the metrics we display, in our secure Supabase database, restricted to your account. We do not sell Google user data, we do not use it for advertising, retargeting, or audience building, we do not share it with third parties, and we do not use it to train AI or machine learning models. You can revoke access at any time from the Visibility page in WedPro Studio, or from your Google Account security settings, and you can email us to have any stored Google data deleted.

WedPro Studio's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing in certain circumstances.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email info@wedproceo.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Essential. We use essential cookies and your browser's own storage to keep members signed in and to remember preferences, such as your cookie choice. These are always on.

Our own visit counting. On our marketing pages we count page views, button clicks and how far people scroll. This uses an anonymous ID kept in your browser's own storage, not a cookie.

If you choose Accept analytics and advertising, we also load:

• Google Analytics, which sets cookies named _ga.
• Microsoft Clarity, which records how visitors use our pages and sets cookies named _clck and _clsk.
• The Meta Pixel, an advertising and measurement tracker, which sets cookies including _fbp and, where applicable, _fbc. Meta receives page URLs without query strings, page and checkout events, account-creation events, purchase amounts and currency, event identifiers, IP address, browser details and these cookie identifiers for advertising measurement and optimisation. If server reporting is configured, the same event identifier prevents duplicate browser and server counting. We do not send your email, Business Brain content or couple enquiry details.

If you choose Essential only, or have not chosen yet, none of these load. If you choose Essential only, any of these cookies already set are cleared.

Changing your choice. Use the Cookie settings link at the bottom of our home page to open the cookie banner again and pick a different option.

We store your visitor reference, choice, timestamp and the version of the notice you accepted in browser storage, retaining earlier acceptance when you withdraw. A first-party consent cookie lets server reporting check your current advertising choice. No Meta event is sent before acceptance or after refusal, including in other open tabs. Events blocked before acceptance are not replayed later. You can also contact info@wedproceo.com about your consent choices.

We do not sell your personal data.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or via a notice within the app. The "Last updated" date at the top of this page reflects the most recent revision.