1. Introduction
At Duva ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our wedding planning platform.
2. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, company name, and contact details of the couple or organization that creates an account
- Guest Information: The names, phone numbers, email addresses, group/party assignments, and RSVP responses of wedding guests that an account holder uploads or enters into the platform
- Usage Data: Information about how you use our services, including message content, delivery and read status, timestamps, and recipient information
- Payment Information: Billing details and transaction history. Card payments are processed by Stripe via Stripe-hosted checkout; full card numbers never touch Duva's servers (see Section 7)
- Registry / Gift Contributions: If a couple enables a cash or honeymoon gift fund, we collect, for each guest who contributes, the contributor's name, email address (optional), an optional gift message, and payment metadata. The payment itself is processed by Stripe Connect and settles to the couple's connected Stripe account; Duva does not hold the funds (see Section 7).
- RSVP & event details, including special-category information: Meal and dietary selections, food allergies and other health- or medical-related restrictions, accessibility needs, and religious or observance-based restrictions, along with plus-one names, song requests, and similar details that guests provide when responding to an invitation. Some of this information — particularly health, dietary, allergy, and religious or observance data — may be considered sensitive or “special category” personal data under certain privacy laws, and is collected only so the couple can accommodate their guests.
- Support & Contact Requests: When you contact us for support or otherwise reach out to us, we collect your name and email address, the subject and message of your request, and related account or organization context, so that we can respond to and resolve your inquiry.
- Uploaded Files: Spreadsheets, images, and other files you upload (for example, guest lists or website photos)
- Technical Data: IP address, browser information, device information, and cookies. This includes a first-party cookie that remembers which marketing channel referred you to us (for example, a link shared on social media) so we can understand which channels bring couples to Duva; it contains no personal information.
3. How We Use Your Information
We use your information for the following purposes:
- To provide and maintain our services
- To process and complete transactions
- To send administrative information
- To improve our services and user experience
- To comply with legal obligations
- To prevent fraud and abuse
4. Messaging & Communications
A core function of Duva is sending wedding communications — invitations, RSVP requests, reminders, and announcements — to a couple's guests by SMS text message, WhatsApp, and email. Please note:
- Numbers are supplied by the couple. The phone numbers and contact details used to send messages are provided by the account holder (the couple or organization), not collected by Duva directly from recipients.
- Opting out of SMS. SMS recipients can reply STOP at any time to opt out of further text messages. Opt-out requests are honored across the platform.
- Opting out of WhatsApp. WhatsApp recipients can opt out by replying with a stop/unsubscribe request or by blocking the sender within WhatsApp. We will not knowingly continue messaging a recipient who has opted out.
- Message & data rates. Message and data rates may apply to messages you receive, depending on your mobile carrier and plan.
- Sender identification. Messages identify the couple and/or Duva so recipients understand who is contacting them and why.
5. Guests & Other Non-Account Individuals
Many people whose information appears in Duva — wedding guests in particular — do not have their own Duva account. Their data is provided to us by an account holder (the couple or organization hosting the event). For this data:
- How it is used. Guest names, phone numbers, email addresses, and RSVP responses are used solely to deliver the couple's wedding communications, collect and display RSVPs, and provide related event features on the couple's behalf. We do not sell guest data or use it for our own marketing.
- Controller relationship. The account holder decides what guest data to provide and how their event is run; Duva processes that data on their behalf to operate the service.
- Access & deletion requests. If you are a guest and want to access, correct, or delete your information, you may contact the couple or organization that invited you, or contact us directly at info@avanttechnologiesllc.com and we will work with the relevant account holder to honor your request.
6. Data Security
We implement appropriate security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
7. Service Providers / Sub-processors
We rely on a small number of trusted service providers (sub-processors) to operate the platform. These providers process information only as needed to provide their services to us and are obligated to protect it. They include:
- Amazon Web Services (AWS): Hosting, data storage (for example, Amazon DynamoDB and Amazon S3), and message delivery for SMS and email (Amazon SNS / AWS End User Messaging and Amazon SES). Our data is stored in the United States.
- Meta Platforms (WhatsApp Business): Delivery of WhatsApp messages to recipients through the WhatsApp Business platform.
- Stripe: Payment processing for (a) message-credit purchases by account holders and (b) guest gift-fund contributions, which are handled through Stripe Connect. Stripe collects and processes card details through Stripe-hosted checkout; Duva does not receive or store full card numbers. For gift funds, contributions settle directly to the couple's connected Stripe account — Stripe acts as the payment processor and money transmitter, performs identity verification (KYC) on the couple's payout account, and handles any applicable tax reporting (such as Form 1099-K). Duva does not hold or custody contributed funds.
8. Data Retention
We retain your account and event information (including guest data, RSVP responses, message history, and gift-fund records) for as long as your organization exists — we do not delete it on a fixed schedule. You remain in control: an organization owner can permanently delete the organization and its associated data at any time from the dashboard (or by request to us), as described in Section 9. Specifically:
- Account, guest, message, and gift-fund data is retained until the organization owner deletes the organization (via the in-product delete control or a deletion request). On deletion, this data is removed from our live systems across all of our databases and file storage.
- Message records. Records of the messages we send on a couple's behalf — including each recipient's phone number and the content of the message — are retained for the life of the account. They are not subject to a fixed automatic expiration; they are deleted when the organization is deleted or on request.
- Consent records. To comply with messaging laws (such as the U.S. Telephone Consumer Protection Act) and to maintain proof that recipients agreed to receive messages, we keep SMS and other messaging-consent records in a separate, append-only archive. These consent records are retained even after a guest's information or an organization is otherwise deleted, and are used solely as evidence of consent.
- Backups. For resilience, we keep encrypted point-in-time backups and cross-region replicas. After you delete data, residual copies may persist in these backups for up to approximately 35 days before they roll off; we do not restore deleted data except to recover from a system failure.
- Uploaded files (such as guest-list spreadsheets and shared file links) may also be subject to a shorter automatic expiration of 7 to 30 days depending on file type.
- Limited records may be retained longer where required to comply with legal, tax, accounting, or fraud-prevention obligations (for example, payment and gift-contribution transaction records).
9. Your Rights & Requests (DSAR)
Depending on your location, you may have certain rights regarding your personal information, including the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your information
- Export or receive a portable copy of your information
- Object to or restrict certain processing
Deleting your organization. Organization owners can permanently delete their organization — and all of its associated guest, RSVP, message, website, and gift-fund data — directly from the dashboard's settings, using a confirmation step. This is irreversible. When you request deletion, we remove your information from our live systems; however, for a limited window, residual copies may persist in our encrypted backups (used for point-in-time recovery) and in cross-region replicas before they are fully purged, as described in Section 8. To exercise this or any other right (access, correction, deletion, export, or objection), or if you prefer we handle it for you, email us at info@avanttechnologiesllc.com. We will verify your request and respond within the timeframe required by applicable law. If you are a guest rather than an account holder, please also see Section 5.
10. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at info@avanttechnologiesllc.com.