Privacy policy
Last updated 23 October 2026
Open with Love is run by Aposlo Studios LTD, a company in the United Kingdom (“we”, “us”). This policy explains what we collect, why, and what you can ask us to do. You can contact us about anything here at Charlie@aposlostudios.com.
Two kinds of people
- Couples who create invitations with us. For your account we are the data controller.
- Guests who open an invitation and reply. The couple decides who to invite and what to ask, so for guest replies the couple is the controller and we are their processor: we only store and show replies on their behalf.
What we collect
- Couples: your names, email, a scrambled (hashed) password, your wedding details, your guest list, and payment confirmation from Stripe. We never see or store your card details.
- Guests: the names you reply for, whether you’re coming, adult or child, meal choices, any note, and any dietary requirements or allergies you choose to tell us.
- Theme requests: what you type into the “tell us your theme” form, so we can reply.
Allergies and dietary needs
Allergy and dietary details can be health information, which the law treats as extra sensitive. We only collect them when a guest chooses to type them in, we only use them so the couple and their venue can cater safely, and they’re shown only to that couple. Leave the box empty if you’d rather tell the couple yourself.
Why we use it (our lawful bases)
- To provide the service a couple has asked for (contract).
- To take payment and keep records the law requires (legal obligation).
- To reply to theme requests and improve the service (legitimate interests).
- Guests’ allergy and dietary details: the guest’s explicit consent, given by typing them in.
We don’t sell data, we don’t use it for advertising, and each couple can only ever see their own replies.
Who helps us
- Supabase stores the data (servers in the EU).
- Vercel runs the website.
- Stripe handles payments.
- Google Fonts supplies the lettering on invitations.
Some of these companies are based outside the UK. Where data leaves the UK, it’s protected by approved safeguards such as the UK International Data Transfer Addendum.
How long we keep it
Guest replies and guest lists are deleted 6 months after the wedding date, unless the couple asks us to delete them sooner. Couple accounts are deleted 12 months after the wedding unless you ask us to keep them. Payment records are kept for 6 years because tax law requires it.
Cookies
We use one essential cookie to keep a couple signed in to their dashboard. Invitations remember a guest’s half-finished reply in their own browser so it isn’t lost.
On our public website we use Google Analytics to see how the site is used, and may use Google Ads to measure our adverts. These cookies stay off unless you press Accept on the cookie banner. If you press Reject, Google receives only anonymous signals with no cookies. Guest invitation pages never use analytics or advertising cookies.
Your rights
You can ask to see, correct, download or delete your information, or object to how we use it. Guests can ask the couple, or us, and we’ll pass the request on. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.