Privacy Policy

Privacy Policy

Last updated: April 20, 2026

Wediary Technologies s.r.o. ("we", "us", "our") operates the mywediary.com platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service.

1. Data Controller

The data controller is Wediary Technologies s.r.o., IČO 249 42 031, with registered office at Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on personal data processing. For any privacy-related inquiries, contact us at support@mywediary.com.

2. Data We Collect

We collect different data depending on how you interact with the Service:

  • Account holders (event owners): Email address, first and last name, couple names, preferred language, date format preference, event details (event name, date, type), payment information (processed by Stripe - we do not store card details).

  • Guests (uploaders): Name, email address (optional; if the event owner has enabled email collection), uploaded photos and videos, upload session metadata (timestamp, file count, device locale).

  • Gift voucher purchasers: Name and email address provided at checkout, payment information (processed by Stripe), and voucher metadata (purchase date, plan, validity, redemption status). No recipient data is collected.

  • Demo users: Couple names, uploaded media. Demo data is automatically deleted after 24 hours.

  • Automatically collected data: Browser type, device information, IP address, pages visited, and interaction patterns (collected via our hosting and analytics provider).

3. Legal Basis for Processing (GDPR Art. 6)

  • Contract performance: Processing account data to provide the Service you purchased.

  • Legal obligation: Accounting and tax records under Czech law.

  • Legitimate interest: Analytics to improve the Service, fraud prevention, and security.

  • Consent: Guest email collection (when enabled by the event owner) and any marketing communications.

4. How We Use Your Data

  • To provide and maintain the Service, including event page creation, media storage, and gallery features.

  • To process payments and manage purchases via Stripe.

  • To send transactional emails (registration confirmation, plan expiration notices, gallery notifications) via our transactional email provider.

  • To generate and deliver QR codes for your event.

  • To enable shared gallery and ZIP download features.

5. Third-Party Processors

We share data with carefully selected processors, all of which maintain appropriate data protection standards and are bound by data processing agreements:

  • Payment processor (Stripe) - PCI DSS compliant.

  • Authentication and database services.

  • Cloud media storage - EU region by default for EU users.

  • Transactional email delivery service.

  • Hosting and analytics platform - privacy-friendly analytics.

A current list of specific subprocessors is available on request via support@mywediary.com.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described above and in line with applicable law:

  • Accounting and invoicing records: 10 years from the end of the accounting period, as required by the Czech Accounting Act.

  • Account contact data (name, email): for the duration of the contractual relationship and for a maximum of 3 years after its termination, unless another legal basis applies.

  • Media (photos and videos) and event data: for the duration of your active plan plus the access window defined by your plan type. After the access window ends, data enters a 7-day grace period and is then permanently and irreversibly deleted.

  • Account self-deletion: when you delete your account from the Account page, access is revoked immediately and all associated data is permanently deleted 7 days after the deletion request.

  • Demo session data: automatically deleted after 24 hours.

  • Marketing data (e.g. email for newsletters): until you withdraw consent, and at most 3 years from the date consent was given.

  • You may request immediate account deletion at any time from your Account settings.

7. Uploaded Content - Responsibilities and Guest Rights

Responsibilities differ depending on whether you are an event owner or a guest uploading media:

  • Event owners: You are responsible for ensuring that any persons appearing in photos or videos uploaded to your event have consented to having their image stored, processed, and shared via the Service, and that any recording was carried out in accordance with applicable law. You are also responsible for the lawful basis on which any guest data (such as email addresses) is collected through your event page. We process this content solely as a processor on your behalf for the purpose of providing the Service.

  • Guests uploading media: When you upload photos or videos to an event page, you confirm that you have the right to share that content and that any other persons clearly identifiable in it are aware of and do not object to the upload. The event owner controls the gallery and decides what is displayed, downloaded, or shared further. Wediary stores and processes your uploads solely on the owner's behalf as a data processor.

  • Guest rights as a data subject: Even though you do not have an account, you remain a data subject under GDPR. You may request access to, correction of, or deletion of media you uploaded, or withdraw any name or email you provided. To do so, contact the event owner directly (they control the gallery), or write to us at support@mywediary.com - we will assist or forward your request to the owner. We will action verified erasure requests without undue delay.

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access your personal data.

  • Rectify inaccurate or outdated data.

  • Request deletion of your data ("right to be forgotten").

  • Restrict or object to certain processing activities.

  • Data portability - receive your data in a structured, machine-readable format.

  • Withdraw consent at any time, where processing is based on consent (without affecting the lawfulness of prior processing).

  • Lodge a complaint with the supervisory authority - the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

To exercise any of these rights, contact us at support@mywediary.com.

9. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), passwordless authentication via one-time codes, row-level security on database access, restricted access controls on media storage, and regular backups. Event pages may optionally be protected with an access code set by the event owner. We regularly review the effectiveness of these measures.

10. Cookies

Our platform uses cookies and similar technologies to ensure proper operation, improve our services, and understand how the Service is used. We use cookies for:

  • Strictly necessary functions: authentication, session management, and language preferences. These are required for the Service to work and do not need consent.

  • Analytics: aggregated, privacy-friendly analytics to understand traffic and usage patterns.

  • We do not use third-party advertising or cross-site tracking cookies.

11. International Data Transfers

Some of our processors operate outside the EU. Where applicable, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequacy decision) to protect your data in compliance with GDPR.

12. Guests and Minors

The Service may be used by guests of any age attending a private event, but uploads from individuals under the age of 16 should only be made with the consent of a parent or legal guardian. We do not knowingly process data of children under 16 without such consent. If you believe a minor has uploaded content without appropriate consent, contact support@mywediary.com and we will remove it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date on this page or, where appropriate, by email. Continued use of the Service constitutes acceptance of the updated policy.

14. Contact

For any questions regarding this Privacy Policy, contact us at support@mywediary.com.