Privacy Policy

In short. We use your data for one thing: producing the seating chart you ordered and, if it is printed, shipping it. While you design, your guest list stays in your browser. When you order, we store it with the order and delete it 90 days after the wedding date. Only Revolut sees your card details. We do not sell personal data, we do no profiling, and we send no newsletters or marketing emails. Google Analytics is active, and in Europe it runs only after your consent. If you use the optional AI theme, the short description you type is sent to Google's AI models; your guest list is not.

Who we are

My Wedding Seat is run by Redbit S.r.l.s. con socio unico, a company based at Viale della Grande Muraglia 494, 00144 Rome, Italy (VAT number IT15237911001, certified email redbitsrls@legalmail.it). Redbit is the "controller" of your personal data. For any privacy question or request, email privacy@redbitapp.com.

Because we are based in the European Union, the EU General Data Protection Regulation (GDPR) applies to all the personal data we handle, including data about customers and visitors outside the EU. This policy is our notice under Articles 13 and 14 of the GDPR and also covers US state privacy laws (see "For US residents" below).

What we collect, why, and for how long

Activity	Data	Purpose	Legal basis (GDPR)	How long we keep it
Designing in the editor, before any order	The guest list and the design you type	Draw the preview image of your chart	Steps taken at your request before a contract (Art. 6(1)(b))	Kept in your browser's local storage. Sent to our server only to draw the preview; not stored and not logged there
AI theme, only if you use it	The description of your wedding that you type (up to 300 characters) and, for the illustration, the theme's colors and a short motif description derived from it. Not the guest list, your names, the date, or the venue	Have an AI model choose the colors, fonts, and frame of your chart and, optionally, generate the decorative illustration at its top	Steps taken at your request before a contract and performance of a contract (Art. 6(1)(b))	The description is not stored after the answer has been produced. The illustration is deleted within 30 days if no order follows; otherwise it is kept with the order and deleted together with the guest list
Your order	Email, name, order history, product, order status; for printed charts also the shipping address and, if you give it, your phone number	Process your order, give you access to your files, have the chart printed and delivered	Performance of a contract (Art. 6(1)(b))	Order and accounting records, 10 years
Guest list and chart content	Names of your wedding guests and their tables, your names, wedding date and venue, the texts and the design of the chart	Produce your files and, for printed orders, the print file	Performance of a contract (Art. 6(1)(b))	Deleted 90 days after the wedding date; if you gave no date, one year and 90 days after the purchase
Payment	Amount, currency, payment status, payment reference. Never your card details	Take the payment, refund it when due	Performance of a contract (Art. 6(1)(b))	With the order; in accounting records, 10 years
Invoices and accounting	Payment records and invoice data	Keep the books and issue the invoices required by Italian law	Legal obligation (Art. 6(1)(c))	10 years
Order emails	Email address, order number, message content	Messages about your order	Performance of a contract (Art. 6(1)(b))	With the order
Server logs and security	IP address, date and time, page requested, referring page, browser	Keep the site secure, prevent abuse, fix errors	Legitimate interest (Art. 6(1)(f))	Log files are rotated and deleted automatically
Consent panel (InMobi Choice)	IP address and the country InMobi derives from it, technical browser data, your choices	Ask for consent where the law requires it, apply your choice, and be able to prove it	Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f))	Your choices are kept in your browser. Data InMobi receives: per its own privacy policy
Analytics with Google Analytics 4	_ga cookie IDs, pages viewed, referrer, device and browser, approximate location; with analytics on, when you start the payment: the chosen product, style, and price; when the order is paid: the order number, product, product category, style, amount, VAT amount, currency, and time of payment	Understand how the site is used and improve it, and measure sales	In the EU, EEA, UK, and Switzerland: consent (Art. 6(1)(a)). In the US: opt-out basis, you can turn it off at any time	Cookies up to 14 months; data in Google Analytics up to 14 months
Cookieless visit counter	Page visited (without query parameters), referring domain, country, device type, page load times; a daily code derived from IP and browser, never the IP itself	Count visits and measure site speed	Legitimate interest (Art. 6(1)(f))	Individual visits 90 days, then totals only; the code changes every day
Customer support by email	Name, email, message, any photos you send (for example, of damage)	Answer you, handle warranty claims and complaints	Contract or steps you asked for (Art. 6(1)(b))	As long as needed to close the request; if it is about an order, with the order

When these periods end, the data is deleted.

Your guest list

The guest list is the heart of a seating chart, and it is made of other people's names: your wedding guests, together with the wedding date and venue.

• While you design, the guest list stays in your browser, in its local storage. It is sent to our server only to draw the preview image of the chart. The server does not store it and does not write it to its logs.
• When you order, the guest list is stored with the order, so we can produce your files, let you edit them, and prepare the print file.
• We use it only to produce your chart. We do not use guests' names for anything else, we do not contact your guests, and we do not pass the names to anyone except, inside the print file, to the print partner that prints your board.
• You are responsible for having a legitimate reason to give us your guests' names. Organizing your own wedding is one: it is a personal, household activity.
• Please do not enter health data, such as allergies or dietary needs, or any other sensitive information about your guests. A seating chart does not need it.
• How long. We delete the guest list 90 days after the wedding date. If you gave no date, your access to the files lasts one year from purchase, and we delete the guest list 90 days after that. Download your final files and keep a copy.

If you are a guest and your name is on a seating chart made with this site, you can write to privacy@redbitapp.com to exercise the rights described below.

The AI theme

The AI theme is optional. In the editor you can type a short description of your wedding (place, season, colors, mood; up to 300 characters) and press a button: an AI model then chooses a theme for your chart (three colors, a font pairing, a frame, and a short theme name) and, optionally, an image model generates one decorative illustration for the top of the seating chart and of the welcome sign. The layout of the chart is still computed by our own typesetting software.

• Who provides it. Google: Gemini models on Google Cloud Vertex AI, operated by Google Cloud EMEA Limited and Google LLC as our processor.
• What is sent. Only the description you type and, for the illustration, the theme's colors and a short motif description derived from it. The guest list, your names, the wedding date, and the venue are not sent. Please do not type names or other personal data in the description.
• Training. Under Google's terms for this paid service, the content we send is not used to train Google's models.
• Automated checks. Descriptions that ask for people, brands, characters, or inappropriate content are refused. A second automated check, also carried out by an AI model, looks at each generated illustration and discards it if it contains people, text, logos, or inappropriate content.
• How long. We do not store the description after the answer has been produced. The generated illustration is stored on our server only so that it can be drawn on your chart: if no order follows, it is deleted within 30 days; if it becomes part of an order, it is kept with the order and deleted together with the guest list.
• Limits. The feature may be limited per visitor per day and may be unavailable at times. The preset styles always remain available.

The illustration is an AI-generated image. More details are on the AI Transparency page.

Payments

You pay by card through Revolut (Revolut Bank UAB, Lithuania), on its hosted checkout. You enter your card number and other payment details on Revolut's payment page; we never see or store them. Revolut only tells us whether the payment went through and its status. The card is charged immediately when you order.

Revolut acts as an independent controller for payment data, under its own privacy policy.

Printing and shipping

Printed seating charts are produced on demand by Gelato (Gelato AS, Norway) and its local production partners: in Italy for posters shipped to Italy, in Germany for foam boards and acrylic panels shipped to Italy, and in the United States for US orders. Gelato and its production partner receive your shipping name and address and the print file, which contains the chart with your guests' names. The carrier, chosen by the print partner, receives what it needs to deliver.

For digital-only orders nothing is sent to Gelato.

Emails

We only email you about your order. We send no newsletters and no marketing emails. Our emails are sent by the email service on our own server.

Browsing and security

The site runs on an IONOS SE server in Germany and reaches you through Cloudflare, which acts as our content delivery network (CDN) and protects the site from attacks. The server logs the requests it receives to detect attacks and errors, not to track what you look at. The content of your guest list is not written to these logs.

The consent panel (InMobi Choice)

Consent is managed by InMobi Choice, a consent management platform provided by InMobi Technology Services Pte. Ltd. (Singapore) that complies with version 2.4 of the IAB Transparency & Consent Framework (TCF). The panel loads from InMobi's servers, so your browser sends InMobi your IP address (which InMobi uses to determine your country and apply the right rules), technical browser data, and your choices. Your choices are stored in your browser, in the cookies and local storage listed in our Cookie Policy.

InMobi acts as an independent controller for the data it receives, as set out in its CMP data processing agreement, and handles it under its own privacy policy.

Analytics with Google Analytics 4

Google Analytics 4 is active on this site. These rules apply:

• In the EU, the European Economic Area, the UK, and Switzerland, no third-party tag loads before you choose, and Google's script loads only after your consent. If you decline or do not choose, analytics stays off.
• In the US, analytics runs on an opt-out basis. You can opt out any time from the consent panel or the Your Privacy Choices page. If your browser sends a Global Privacy Control signal, analytics stays off automatically.
• IP anonymization is on, Google Signals is off, and no advertising features are used.
• Google's script is not loaded at all on the order page, and nothing about your files or your guest list reaches Google Analytics.
• Sales measurement. If analytics is on in your browser when you place an order (in the EU, the EEA, the UK, and Switzerland, only if you gave your consent), our server sends Google Analytics a "purchase" event with the order number, the product, the amount, and the currency, linked to your analytics identifier, so that we can measure sales. Under the same conditions, when you press the payment button your browser sends Google Analytics a "begin_checkout" event with the chosen product, the style, and the price, and the "purchase" event also carries the style, the product category, the VAT amount, and the time of payment. Neither event includes a name, email, address, or guest data. If analytics is off, nothing is sent.
• Cookies last up to 14 months, and data stays in Google Analytics for up to 14 months.

You can change your choice any time with the "Cookie settings" link in the footer. Technical details are in our Cookie Policy. We use no advertising cookies and no ad pixels.

Cookieless visit counter

We use our own visit counter (stats.redbitapp.com), which is first-party and runs on our server. It sets no cookies and does not store your IP address. It records the page visited without query parameters, just the domain of the site you came from, your country, device type, and page load times. To count unique visitors, it computes a code from your IP address and browser using a key that changes every day, so the next day it can no longer be linked back to you. Keys are deleted after 7 days and individual visits after 90; after that, only totals remain. The counter honors the Do Not Track and Global Privacy Control signals.

Where the data comes from and whether you have to provide it

Data comes from you (the editor, the order form, emails) and from your browser. Guests' names come from you, not from the guests. Revolut tells us the payment outcome; the print partner tells us the production and shipping status. Cloudflare and InMobi derive your country from your IP address. We do not buy data or match it with other databases.

Your email and name are needed for any order, and your shipping address for a printed one; without them we cannot fulfill it. Your phone number is optional. The wedding date is optional too: it sets how long you can edit your files and when we delete the guest list. Consent for analytics is optional and does not affect your order.

Who we share data with, and international transfers

We do not sell or rent personal data. We use vendors that process data on our behalf, and we disclose data to authorities only when the law requires it. Revolut and InMobi handle the data they receive as independent controllers.

Vendor	Service	Data	Location	Transfer safeguards
IONOS SE	Server hosting for the site, the visit counter, and email	Order data, guest lists, files, logs, emails	Germany (EU)	No transfer outside the EU
Cloudflare, Inc.	CDN and security	Traffic in transit, IP address, country	United States and global network	EU-US Data Privacy Framework and Standard Contractual Clauses
Revolut Bank UAB (independent controller)	Card payments	Card details, amount, payment outcome	Lithuania (EU)	No transfer outside the EU by us
Gelato AS and its local production partners, with the carrier they choose	Printing and shipping of printed charts	Shipping name and address, the print file	Norway (EEA); production in Italy, Germany, or the United States	For orders shipped to the US: transfer necessary to perform the contract (GDPR Art. 49(1)(b))
InMobi Technology Services Pte. Ltd. (independent controller)	Consent management platform (InMobi Choice)	IP address, technical browser data, consent choices	Singapore and other countries outside the EU	Standard Contractual Clauses (Decision (EU) 2021/914)
Google Ireland Limited	Analytics (Google Analytics 4), only after consent	The analytics data described above, including the "begin_checkout" and "purchase" events	Ireland and United States	EU-US Data Privacy Framework and Standard Contractual Clauses
Google Cloud EMEA Limited and Google LLC	AI theme (Google Cloud Vertex AI, Gemini models), only if you use it	The description you type and, for the illustration, the theme's colors and a short motif description. Not the guest list, your names, the date, or the venue	Ireland, United States, and global network	EU-US Data Privacy Framework and Standard Contractual Clauses

Standard Contractual Clauses are approved by the European Commission (GDPR Art. 46); the EU-US Data Privacy Framework is based on the Commission's adequacy decision of July 10, 2023.

Your rights under the GDPR

Articles 15 to 22 of the GDPR give you the right to:

• access your data and get a copy;
• correct inaccurate or incomplete data: you can also correct names yourself by editing your chart while your order page is open;
• have your data deleted when it is no longer needed or was processed unlawfully (data we are legally required to keep, such as accounting records, stays until the period ends). You can ask us to delete your guest list before the 90 days;
• restrict processing in certain cases;
• receive your data in a structured format (portability) for processing based on a contract or consent;
• object to processing based on legitimate interest;
• withdraw consent at any time, without affecting processing that already happened: for analytics, use the "Cookie settings" link.

Email privacy@redbitapp.com. We reply within one month; for complex requests we may need up to two more months, and we will tell you within the first month (GDPR Art. 12). You can also file a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the EU country where you live or work.

Children

The shop is meant for adults who are organizing a wedding, and we do not address it to children. A guest list may include the names of children who are invited: we treat them like every other name, only to produce the chart, and delete them with the rest of the list.

Security

The site works only over HTTPS. Card details never pass through our server. Your order page is reached through a secret link: keep it private, because anyone who has it can open the order and see the guest list. If a data breach occurs, we will follow GDPR Articles 33 and 34.

Automated decisions

We make no decisions based solely on automated processing that have legal or similarly significant effects on you, and we do no profiling (GDPR Art. 22). The layout of the chart is computed by our typesetting software from the text you enter. If you use the AI theme, an AI model suggests colors and fonts, and automated checks may refuse a description or discard a generated illustration: this has no legal or similarly significant effect on you, and the preset styles remain available.

For US residents

This section applies to residents of California, where the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) applies, and of other states with similar privacy laws. We extend these rights to all our US customers and visitors, even where these laws' thresholds do not apply to us.

Notice at collection

Category	What	Source	Why	How long	Sold or shared
Identifiers	Name, email, phone if you provide it, shipping address, IP address; _ga cookie IDs when analytics is on	You; your browser	Fulfill your order, security, analytics	As described in the table above; order and accounting records 10 years	No
Commercial information	Products ordered, amounts, order and payment status	You; Revolut	Fulfill your order, accounting; when analytics is on, measure sales in Google Analytics (at the start of payment: chosen product, style, price; once paid: order number, product, product category, style, amount, VAT amount, currency, time of payment)	Order and accounting records 10 years	No
Guest list	Names of your guests, wedding date and venue	You	Produce your chart and files	Deleted 90 days after the wedding date	No
Internet activity	Pages viewed, referrer, browser and device	Your browser	Security and analytics	Up to 14 months in Google Analytics; 90 days in the visit counter	No
Approximate geolocation	Country and, in the US, state. Never your precise location	Derived from your IP address by Cloudflare and InMobi	Apply the right consent rules; analytics	90 days in the visit counter; up to 14 months in Google Analytics	No
Communications	Messages you send us	You	Answer you, handle warranty claims and complaints	As long as needed; if it is about an order, with the order	No

We do not ask for sensitive personal information, and we ask you not to enter any about your guests. Only Revolut handles your card details. We do not use any data to infer characteristics about you.

We do not sell or share your personal information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not sell or share the personal information of consumers under 16.

Global Privacy Control

We treat the Global Privacy Control (GPC) signal as a valid request to opt out: if your browser sends it, analytics stays off in that browser automatically. You get the same result from the consent panel, which opens from the "Cookie settings" link in the footer, as explained on the Your Privacy Choices page.

Your rights

You have the right to know what personal information we have about you and get a copy, to ask us to delete or correct it, to opt out of its sale or sharing (which we do not do), to limit the use of sensitive personal information (which we do not use), and not to be discriminated against for exercising these rights.

Email privacy@redbitapp.com with the subject line "US privacy request." An agent you have appointed in writing can also make a request for you. We verify your identity by matching the information you give us with what we have, for example your order number and the email you used. We respond within 45 days, and may extend that by another 45 days if we tell you why.

Appeals

If we deny your request in whole or in part, we will explain why. You can appeal by emailing privacy@redbitapp.com with the subject line "Appeal." We will review the decision and reply in writing within 45 days. If you are not satisfied with the outcome, you can contact your state Attorney General or, in California, the California Privacy Protection Agency.

Changes to this policy

The date of the last update is shown at the bottom of the page. We update this policy when the way we handle data changes, and we will post a notice on the site for significant changes.