1. Introduction
At Duva ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our wedding planning platform.
2. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, company name, and contact details of the couple or organization that creates an account
- Guest Information: The names, phone numbers, email addresses, group/party assignments, and RSVP responses of wedding guests that an account holder uploads or enters into the platform
- Usage Data: Information about how you use our services, including message content, delivery and read status, timestamps, and recipient information
- Payment Information: Billing details and transaction history. Card payments are processed by Stripe via Stripe-hosted checkout; full card numbers never touch Duva's servers (see Section 7)
- Registry / Gift Contributions: If a couple enables a cash or honeymoon gift fund, we collect, for each guest who contributes, the contributor's name, email address (optional), an optional gift message, and payment metadata. The payment itself is processed by Stripe Connect and settles to the couple's connected Stripe account; Duva does not hold the funds (see Section 7).
- RSVP & event details, including special-category information: Meal and dietary selections, food allergies and other health- or medical-related restrictions, accessibility needs, and religious or observance-based restrictions, along with plus-one names, song requests, and similar details that guests provide when responding to an invitation. Some of this information — particularly health, dietary, allergy, and religious or observance data — may be considered sensitive or “special category” personal data under certain privacy laws, and is collected only so the couple can accommodate their guests.
- Support & Contact Requests: When you contact us for support or otherwise reach out to us, we collect your name and email address, the subject and message of your request, and related account or organization context, so that we can respond to and resolve your inquiry.
- Uploaded Files: Spreadsheets, images, and other files you upload (for example, guest lists or website photos)
- Technical Data: Request and security information needed to deliver the service, including IP address and browser information. Authentication uses browser storage. Optional analytics, acquisition-attribution cookies, session replay and affiliate scripts are inactive in this release; previously stored choices do not activate them.
3. How We Use Your Information
We use your information for the following purposes:
- To provide and maintain our services
- To process and complete transactions
- To send administrative information
- To send occasional emails about getting started with Duva, new features, and tips — see below
- To improve our services and user experience
- To comply with legal obligations
- To prevent fraud and abuse
Emails about the product. If you create a Duva account, we may email you a small number of messages about setting up your account and getting the most out of Duva. Every one of these includes an unsubscribe link, and we honor opt-outs promptly. Opting out never affects account emails you need — invitations, receipts, security notices, and support replies — which we continue to send. We do not sell your email address or share it for anyone else's marketing.
4. Messaging & Communications
A core function of Duva is sending wedding communications — invitations, RSVP requests, reminders, and announcements — to a couple's guests by SMS text message, WhatsApp, and email. Please note:
- Numbers are supplied by the couple. The phone numbers and contact details used to send messages are provided by the account holder (the couple or organization), not collected by Duva directly from recipients.
- Opting out of SMS. SMS recipients can reply STOP at any time to opt out of further text messages. Opt-out requests are honored across the platform.
- Opting out of WhatsApp. WhatsApp recipients can opt out by replying with a stop/unsubscribe request or by blocking the sender within WhatsApp. We will not knowingly continue messaging a recipient who has opted out.
- Message & data rates. Message and data rates may apply to messages you receive, depending on your mobile carrier and plan.
- Sender identification. Messages identify the couple and/or Duva so recipients understand who is contacting them and why.
5. Guests & Other Non-Account Individuals
Many people whose information appears in Duva — wedding guests in particular — do not have their own Duva account. Their data is provided to us by an account holder (the couple or organization hosting the event). For this data:
- How it is used. Guest names, phone numbers, email addresses, and RSVP responses are used solely to deliver the couple's wedding communications, collect and display RSVPs, and provide related event features on the couple's behalf. We do not sell guest data or use it for our own marketing.
- Controller relationship. The account holder decides what guest data to provide and how their event is run; Duva processes that data on their behalf to operate the service.
- Access & deletion requests. If you are a guest and want to access, correct, or delete your information, you may contact the couple or organization that invited you, or contact us directly at info@avanttechnologiesllc.com and we will work with the relevant account holder to honor your request.
- Registry links and maps. Following a registry link takes you to that retailer's website, where its privacy policy applies. Duva's affiliate rewriting script is inactive. Choosing to show an embedded Google map contacts Google to display the map; Google receives the requested venue address or location and technical request information. We suppress the embedding page's referrer. The retailer or map provider's own practices apply to that interaction.
6. Data Security
We implement appropriate security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
7. Service Providers / Sub-processors
We use the following providers to deliver requested features. Their own terms and privacy practices can also apply, depending on the service:
- Amazon Web Services (AWS): Hosting, data storage (for example, Amazon DynamoDB and Amazon S3), and message delivery for SMS and email (Amazon SNS / AWS End User Messaging and Amazon SES). Our data is stored in the United States.
- Meta Platforms (WhatsApp Business): Delivery of WhatsApp messages to recipients through the WhatsApp Business platform.
- Stripe: Payment processing for (a) message-credit purchases by account holders and (b) guest gift-fund contributions, which are handled through Stripe Connect. Stripe collects and processes card details through Stripe-hosted checkout; Duva does not receive or store full card numbers. For gift funds, contributions settle directly to the couple's connected Stripe account — Stripe acts as the payment processor and money transmitter, performs identity verification (KYC) on the couple's payout account, and handles any applicable tax reporting (such as Form 1099-K). Duva does not hold or custody contributed funds.
- Amazon Bedrock: When you request an AI-assisted thank-you draft, the feature sends the relevant couple/guest names and gift details to an AWS-hosted model to generate the draft. Requested planning recommendations send couple names, tradition, wedding date, guest count, ceremony names, open task titles and due dates, and vendor counts to the model. Please include only information needed for that request.
- Optional tracking providers: Google analytics/tag-manager, Sentry diagnostics/replay and affiliate scripts are inactive in this release. Essential service providers and features listed above continue to process information needed to provide the service.
8. Data Retention
We currently retain account and event information while an organization exists. The automated organization-erasure rollout is temporarily unavailable. An organization owner can request a review of deletion by contacting support; the request is not a completed deletion. We must identify the affected live systems, files, message providers, replicas and backups before confirming its scope and outcome.
- Account, guest, message and gift-fund records. These records are not all subject to a fixed automatic expiration. Contact us to request access, correction or deletion and to discuss the information that applies to your account.
- Consent records. Messaging-consent evidence is stored separately in an append-only archive, including recipient phone number, consent channels, source, method and timestamp; some events also contain request or event details. These records currently have no automatic expiration and are retained after guest or organization deletion. A request involving these records requires a review of applicable consent-evidence and legal retention obligations.
- Backups and replicas. Copies can remain in backups and replicas after a change to live data. Their treatment and restoration safeguards form part of a deletion review; we do not describe an unverified purge as complete.
- Uploads and limited records. Some uploaded files have automatic expiration based on file type. Other records may need to be retained for legal, tax, accounting, security, fraud-prevention or dispute purposes.
9. Your Rights & Requests (DSAR)
Depending on your location, you may have certain rights regarding your personal information, including the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your information
- Export or receive a portable copy of your information
- Object to or restrict certain processing
Requesting deletion. Automated organization erasure is temporarily unavailable. Email info@avanttechnologiesllc.com to request deletion, access, correction, export or objection. We will verify the request and determine the relevant account and data locations. We will communicate what can be removed, any required retention and the outcome; submitting a request does not itself erase the data. If you are a guest rather than an account holder, please also see Section 5.
10. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at info@avanttechnologiesllc.com.