Privacy Policy

1. Who we are

WedPro Studio ("we", "us", "our") is operated by WedPro CEO Ltd, a company providing software tools for wedding industry suppliers in the United Kingdom. For any privacy questions, contact us at info@wedproceo.com.

We are the data controller of the personal data described in this policy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What we collect

• Account data: your name, email address, password (hashed), and login activity.
• Billing data: subscription plan, billing status, and payment references. Card details are handled by Stripe and never stored on our servers.
• Business Brain data: information you provide about your business, ideal clients, and brand voice.
• Usage data: the outputs you generate, feedback you submit, and basic technical logs (IP address, browser, timestamps) used for security and service improvement.

3. How we use your data

We process your data to:

• Provide and personalise the WedPro Studio tools.
• Manage your account, subscription, and billing.
• Send essential service emails (account, billing, security).
• Improve, secure, and troubleshoot the platform.
• Comply with our legal obligations.

Our lawful bases are: performance of the contract with you, legitimate interests in running and improving our service, your consent where required, and compliance with legal obligations.

4. How we store your data

Your data is stored on secure, encrypted servers within the UK or European Economic Area, using trusted infrastructure providers (including Supabase and Cloudflare) under appropriate data processing agreements. Access is restricted to authorised WedPro Studio staff only where strictly necessary.

We retain your data for as long as your account is active. If you close your account, your data is permanently deleted within 30 days, except where we are required to retain limited records for legal, tax, or accounting purposes.

5. Your Business Data and AI Processing

The information you share with your Business Brain - including details about your business, your ideal clients, and your brand voice - is stored securely in your private account and is never visible to other users.

Your data is processed by our AI systems solely for the purpose of generating personalised outputs for you. It is not used to train AI models, shared with third parties, or used for any purpose other than powering your WedPro Studio tools.

You can update or delete your Business Brain data at any time from within your account. If you close your account, all your data is permanently deleted.

WedPro Studio is fully committed to UK GDPR compliance. Your data is stored on secure, encrypted servers and is only accessible to you and authorised WedPro Studio staff where strictly necessary to provide support.

6. Third parties we use

We use a small number of trusted sub-processors to deliver the service. Each is contractually required to handle your data lawfully and securely:

• Supabase - database and authentication.
• Cloudflare - hosting and security.
• Stripe - payment processing.
• Resend - transactional email delivery.
• OpenAI and other AI providers - generating personalised outputs from prompts you submit.

We do not sell your data, share it for advertising, or transfer it outside the UK/EEA without appropriate safeguards.

7. Google user data (Visibility feature)

WedPro Studio includes an optional feature called Visibility. If you choose to connect your Google account, we access a limited set of Google user data on a read-only basis. Connecting Google is entirely optional and you can disconnect at any time.

What Google data we access

• Google Analytics (read-only): aggregated traffic statistics for the website property you select, such as sessions, users, page views, traffic sources, and top pages.
• Google Search Console (read-only): search performance data for the property you select, such as impressions, clicks, average position, and top search queries and pages.
• Basic Google account identifiers: your email address and the list of Analytics/Search Console properties you have access to, so you can choose which property to connect.

We never request write access. We cannot change, publish, or delete anything in your Google Analytics or Search Console accounts, and we do not access Gmail, Drive, Contacts, Calendar, or any other Google service.

Why we access it

Solely to display your own website traffic and search performance back to you inside WedPro Studio, so you can see how your marketing is performing alongside your other Studio tools. This data is shown only to you, in your own account.

How it is stored and shared

We store the OAuth tokens needed to refresh your connection and a cached copy of the metrics we display, in our secure Supabase database, restricted to your account. We do not sell Google user data, we do not use it for advertising, retargeting, or audience building, we do not share it with third parties, and we do not use it to train AI or machine learning models. You can revoke access at any time from the Visibility page in WedPro Studio, or from your Google Account security settings, and you can email us to have any stored Google data deleted.

WedPro Studio's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing in certain circumstances.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email info@wedproceo.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use only essential cookies and local storage required to keep you signed in and to remember session preferences. We do not use advertising or third-party tracking cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or via a notice within the app. The "Last updated" date at the top of this page reflects the most recent revision.