Privacy policy

What we collect

• Account details: your name, email address, authentication records and session information. Passwords are handled by Convex Auth, not sent to AI providers.
• Wedding and guest data: couple names, date, location, style, guest list and contact details, plus-ones, RSVPs, dietary needs and allergies, budget, tasks, seating, timeline and collaborator roles.
• Planning conversations: emails exchanged with vendors and guests, their attachments, vendor contact information, quotes, assistant messages and actions you confirm.
• Files and purchases: uploaded files such as contracts and PDF quotes, and purchase identifiers, amounts and credit records. Card details are entered on Polar’s hosted checkout, not on ChronoLove.
• Technical information: request and security information, verification results, and AI usage records such as model, token counts and cost. These help protect the service and control costs.

How the data is used

We use this information to provide your planner, share a wedding with the people you invite, find vendors, send approved messages, read replies and RSVP responses, compare quotes, summarise contracts, and answer your assistant questions. Only the information needed for an operation is sent to its provider.

Guest dietary needs and allergies can be sensitive. Add only information needed for the wedding, tell your guests how it will be used, and keep it accurate. Do not upload information you do not have permission to share.

Providers that process data

• Convex hosts authentication, the database, stored files, workflows and live updates. The backend deployment is in US East. Account and wedding records are stored there.
• Anthropic processes the wedding context, text and relevant documents needed for an AI task. Mistral can process the same types of data as the fallback or selected AI provider. Tasks can include reading vendor emails, guest RSVPs, quotes and contracts, parsing a guest import, and answering assistant questions.
• Firecrawl receives search queries based on your vendor needs, such as category, location and price range, and reads public vendor websites. It does not need your guest list. Retrieved page text is cached temporarily to avoid repeated searches.
• AgentMail sends and receives planning emails through a shared ChronoLove inbox for each environment. It processes recipient and sender addresses, message bodies, thread information and attachments. Replies are routed back to the appropriate wedding.
• Polar hosts checkout and processes purchases. We send account and wedding identifiers and the selected product so credits reach the right wedding. Polar collects checkout details and sends signed purchase and refund events to Convex.
• Cloudflare serves this website and processes delivery and security requests. Cloudflare Turnstile verifies protected actions such as sign-up and RSVP submission. The browser sends planner queries directly to Convex, not through a Cloudflare application server.

These providers operate under their own terms and privacy policies. Data may be processed outside your country, including in the United States. AI processing is not local to your device.

What is shared with other people

People you invite to collaborate can access the wedding according to their role. A guest’s RSVP link shows that guest’s invitation and response, not the whole guest list. Treat invitation and collaborator links as private.

Vendor inquiries include the wedding details in the draft you approve. Every first-contact vendor email requires your approval. Automatic factual answers do not disclose your budget or guest contact details and cannot make commitments. You can turn automatic answers and follow-ups off. A dietary and allergy summary sent to a caterer is a draft you review before sending.

We do not sell your wedding or guest data, or use it for advertising.

Storage, retention and deletion

We retain your planner data while your account and wedding are active. Deleting a wedding deletes its wedding data, guest records, emails stored in ChronoLove, uploaded files, credits and assistant history. Deleting your account deletes the account and every wedding you own, and removes your memberships in other people’s weddings. It does not delete weddings owned by someone else. Large deletions run in batches and may take a short time to finish.

Demo data is scheduled for deletion after 24 hours. Demo: vendors are fictional and emails are simulated. Development emails are redirected to a test inbox rather than sent to real guests or vendors.

Deleting data from ChronoLove cannot recall emails already delivered or remove a vendor’s own copy. Provider logs, inbox records, backups and payment records may remain under the providers’ retention policies or legal requirements. A minimal global do-not-contact record is retained to respect a vendor’s opt-out across weddings.

Sessions and security

The app stores authentication session information in your browser so you can stay signed in. We use access controls, protected submissions, signed webhooks and rate limits. No online service can promise absolute security. Do not share passwords or private invite links.

Your choices and questions

You can edit your planner data, control email automation, delete a wedding in wedding Settings, or delete your account in Account settings. For access, correction, deletion or privacy questions, email hello@chronolove.app. Depending on where you live, you may also have the right to object, restrict processing or complain to a data protection authority.

If this policy changes, we will update the date above and communicate material changes in the service.