Privacy policy

This translation is for your convenience. The German version is binding; the contract language is German. German version

Last updated: 9 November 2026

1. Controller

Elevatrade UG (haftungsbeschränkt), Twente Ring 15, 48565 Steinfurt, Germany, represented by the managing director Alexander Keller, email: einladung@elevatrade.de.

We offer digital wedding invitations to couples. We are the controller for the couples' data. The couples enter their guests' data; we process it only to provide the invitation and the reply to the couple and their guests.

2. What we process and why

Visiting the pages

When pages are opened, our host processes technically necessary data (IP address, time, requested address, browser) to deliver and secure the pages, Art. 6(1)(f) GDPR. These logs are deleted after 30 days. We use no advertising tools and no analytics services of other providers, and do not track who opens invitations or emails. We serve fonts ourselves, without requests to Google.

Usage statistics

To improve the service and find errors, we count usage ourselves, without other providers and without cookies. On the home page and the sign-in page: the page opened, the website you came from (only its address), campaign details in the link, language, device type (phone or computer) and clicks on the button to start designing. To tell visits apart, we form a checksum from the IP address and browser identifier together with a random value. We do not store the IP address, and the random value is replaced every day, so a visit is not recognised the next day. When you create an account, we note where that visit came from. In the couple area we store with your account which sections you open and when, whether you start or cancel payment, and technical error messages. We never count personal guest links. Nothing is stored in your browser for this. The legal basis is Art. 6(1)(f) GDPR (our interest in improving the service). The data is deleted after twelve months, and immediately with your account. You can object at any time.

The couple's account

Email address and password for signing in, the wedding details (names, date, place, texts, photos, colours) and the guest list. The purpose is to provide the invitation, Art. 6(1)(b) GDPR. For signing in we set a technically necessary session cookie (§ 25(2) TDDDG).

We store the language you choose for the couple area with your account, so that our emails to you come in that language as well. Your browser also keeps it in a cookie ("ui_lang", one year). Both serve only the language you asked for (§ 25(2) no. 2 TDDDG).

Guests

Names, language, form of address and, if the couple enters them, email address and phone number; in addition the guest's reply: yes, no or maybe, companions, children, meal choice, song wish, answers to the couple's own questions (such as shuttle or accommodation) and message to the couple. Guests open their invitation through a personal link without signing in. The legal basis is Art. 6(1)(b) and (f) GDPR (organising the wedding). If the couple shares the link in a messenger such as WhatsApp, KakaoTalk or Telegram, the messenger fetches the link preview with the guest's name.

In the guest's browser, not on our server, the invitation remembers in local storage whether it has been opened before (then there is "Skip") and whether the guest has turned off the music. This is strictly necessary for these functions requested by the guest (§ 25(2) no. 2 TDDDG). Images, fonts and music come from our own server, not from third parties.

If the couple has turned on the wall of wishes, guests can write a message under a name of their choice. The couple sees it straight away; other guests of the same wedding see the name and message only once the couple has approved it. The guest can change or delete the message at any time through their link. The legal basis is Art. 6(1)(a) GDPR (the guest decides whether to write).

If the couple has turned on guest photos, guests can upload photos through a QR code or their invitation, with a name if they wish. The phone makes the photos smaller before uploading; our server also removes all metadata such as location and camera. The couple sees every photo; other guests with the album link and the photo wall see it once the couple has approved it (or immediately, if the couple has chosen that). So that the guest can delete their own photos again, their browser keeps a key for them in local storage. The legal basis is Art. 6(1)(a) GDPR (the guest decides whether to share photos). Anyone who appears in a photo and does not want this can contact the couple or us; we will then delete it.

The couple creates the seating plan. It only contains which person sits at which table. If the couple makes it visible, each guest sees only the table of the people on their own link.

Allergies and intolerances are health data. We store them only if the guest expressly consents (Art. 9(2)(a) GDPR), and pass them only to the couple in their overview, never by email. The guest can withdraw consent at any time with the couple or with us.

Emails

At the couple's request we send guests the invitation and reminders by email and notify the couple of new replies. Opens and clicks are not measured.

Payment and invoice

For payment we redirect the couple to Stripe. Stripe processes the payment data itself; we only receive the amount, payment status, email address, billing address and the invoice. The legal basis is Art. 6(1)(b) and (c) GDPR.

Translations

If the couple has texts translated by machine, we send only these texts and the couple's names to Anthropic, never guests' data. Guests see the translation right away; the couple can correct it on the text at any time.

Device contacts and Spotify links

When you select device contacts, the browser passes only the chosen names, phone numbers and email addresses to the unsaved guest table. They reach our server only when you save. We receive no lasting address-book access.

Spotify track wishes appear as ordinary links. We load no Spotify embed and send Spotify no data before you open a link. Once opened, Spotify processes data under its own responsibility.

The block’s form of address, tone and cultural guidance are also sent to Anthropic for the requested translation. Please do not enter guest data there.

3. Service providers

• Google Cloud and Firebase (Google Ireland Ltd.): hosting and database in Frankfurt am Main (region europe-west3). Couples' sign-in (Firebase Authentication) may also process data outside the EU.
• Mailjet (Sinch Mailjet SAS, France): sending emails, servers in the EU.
• Stripe (Stripe Payments Europe Ltd., Ireland): payment and invoice.
• Anthropic (Anthropic, PBC, USA): machine translation of the couple's texts.

Data processing agreements are in place with all service providers where required. For transfers to the USA we rely on the adequacy decision for the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

4. How long we keep data

We automatically delete guests, replies, wishes, photos, guest photos, the seating plan and the whole wedding three months after the wedding date. The couple receives an email two weeks before and can export the guest list beforehand. The couple can delete their wedding themselves at any time. The couple's account (email address) remains until the couple deletes it in the couple area; all of their weddings go with it. We keep invoices for as long as commercial and tax law require (up to ten years).

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR) and the right to withdraw consent. Guests can most easily contact the couple who invited them, or us. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.