Folia is a web-based wedding planning software platform that allows couples and professional wedding planners to organize wedding-related information.
This Privacy Policy describes how Folia (“Folia,” “we,” “us,” or “our”) collects, uses, and shares personal information in connection with our website and wedding planning software platform (the “Services”).
This Privacy Policy applies to the following individuals (altogether, “Users”): a) website visitors, b) account holders, e.g., couples and wedding planners (“Registered Users”), c) individuals whose information is submitted to Folia either by Registered Users or directly by individual via a link (e.g., wedding guests and vendors).
While the platform is primarily used by individuals in the US market, the platform is currently available to users in the United States, Canada, EU and UK, and geographic restrictions are not enforced at signup.
Before using the Service or submitting (or authorizing Registered Users to submit) any personal information to Folia, please review this Privacy Policy carefully and contact us if you have any questions. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access the Site or use our Services.
1. Information We Collect
A. Automatically Collected Information
Upon visiting the website, we automatically collect certain information:
- IP address
- Device and browser information
- Usage data (e.g., features used, pages visited)
- Cookies and similar tracking technologies
B. Information You Provide When Creating an Account
Upon creating an account, we may collect:
- Email address – for authentication and transactional communications
- Password (stored in hashed form)
- Wedding date – for configuring event planning timeline
- Partner name(s) – for personalization
C. Information You Provide After Account Creation
Registered Users can add optional data after creating an account. Registered Users bear the sole responsibility of ensuring any personal information provided has been obtained after the relevant individual and/or legal guardian has been properly informed and as required by applicable law, the individual has consented to such collection and use under the terms of our Privacy Policy.
(i) Account Holder Information
When Registered Users choose to add optional data after creating an account, we may collect the following to fulfill the event planning and project management aspects of our Services:
- Wedding details (e.g., venue, theme, budget)
- Task and planning information
- Vendor contact information
- Seating arrangements and event logistics
(ii) Guest Information
Registered Users may collect and/or upload information about their wedding guests, including:
- Name
- Email address
- Mailing address
- RSVP status
- Meal preferences*
- Seating assignments
- Plus-one information
Guests may also submit their mailing address directly through a secure link, without creating an account. Guests do not log in and do not have persistent profiles.
*Important: Certain information entered regarding the account holder and/or guests (such as meal preferences or relationship details) may reveal or relate to sensitive personal information (“SPI”), or otherwise qualify as special category data under applicable law including the GDPR (e.g., dietary restrictions/allergies (medical), religious practices, or other personal characteristics including but not limited to sexual orientation, race or ethnicity). Registered Users providing any data that may be considered SPI or special category data should only do so where necessary and appropriate. It is the sole responsibility of Registered Users to ensure that any personal information collected and provided to Folia have been properly informed and have provided consent to such collection & use, as required under applicable law and the terms of this Privacy Policy. For further information, please see Section 6 and Section 8.
(iii) Vendor Information
Users may store vendor-related information such as:
- Name
- Contact details
- Contract amounts
- Notes
(iv) Payment Information
If you purchase a subscription, Stripe handles payment processing. At the time of purchase, the following data is provided to Stripe for the purposes of processing subscription payments:
- Name
- Email address
- Billing country and
- Subscription plan details at time of purchase.
Folia does not store raw card data. Stripe is a PCI Level 1-compliant processor. For information about Stripe’s privacy policy, please visit stripe.com/privacy. Further information regarding how Stripe’s services treats personal data can be found in Sections 3, 4, 7, and 9 below.
2. How We Use Your Information
Folia takes protection of User data including personally identifiable information (“PII”) very seriously. We use personal information only for purposes that are reasonable and appropriate given the nature of the Services, in compliance with applicable regulations, including relevant jurisdiction specific laws.
We use personal information to:
- Provide and operate the Services which include the website and software
- Create and manage user accounts
- Process subscription payments
- Enable wedding planning features (guest lists, budgets, vendors)
- Send transactional communications (e.g., account verification, reminders)
- Improve and analyze product performance
- Measure marketing effectiveness
- Comply with legal obligations
A. Marketing Communications
We use your contact information to send you promotional communications about our services. You may opt out of receiving marketing emails at any time by following the unsubscribe instructions included in those communications. Even if you opt out, please be advised that we may still send you non-promotional communications that are necessary to fulfill our obligations (e.g., transactions, notifications regarding your account).
B. Analytics
We use tools such as Google Analytics and PostHog to analyze user behavior. We will retain and evaluate information on your recent visits to our website and how you move around different sections of our website for analytics purposes to understand how people use our website and software so that we can make it more useful and intuitive. These tools use pseudonymous identifiers and do not receive direct identifiers such as your name or email. For further information regarding these tools, please see Section 3 below.
C. Advertising
We use advertising tools, including Google Ads and Meta Platforms (Facebook/Instagram), to measure campaign performance for a better understanding of your product/service preferences.
- Conversion events may be shared (e.g., signups, purchases)
- Certain identifiers may be hashed before transmission
- Advertising tools may collect device and browser-level identifiers (e.g., cookies, IP address) in accordance with their own policies
4. International Data Transfers
Folia is based in the United States and uses service providers that process data in the United States and other jurisdictions. If you are located outside the United States, your information may be transferred to and processed in the United States. Where required, we rely on appropriate safeguards including with our 3rd party service providers, such as standard contractual clauses and/or Data Protection Agreements.
6. Your Privacy Rights
The below regarding your rights applies to residents of certain US states or individuals located in the EU/UK or Canada. Applicability depends on relevant regulations such as, California (CPRA or CCPA, as amended), Virginia (VCDPA), Colorado (CPA), EU/UK (GDPR/UK GDPR), Canada (PIPEDA/applicable provincial regulations). Under applicable US state privacy regulations, personal information excludes certain de-identified data and publicly available information.
If you are a resident of certain U.S. states or if you are located in the EU/UK or Canada, you may have rights to:
- Right to know / access You can request disclosure of (1) the categories and/or specific pieces of personal information collected about you, (2) the categories of sources for that personal information, (3) the purposes for which the business uses that information, (4) the categories of third parties with whom the business discloses the information, and (5) the categories of information that the business sells or discloses to third parties.
Under California’s Shine the Light law, you can request a list of the types of personal information that we have disclosed during the preceding year to third parties for their direct marketing purposes, and the identity of those third parties, up to twice a year, free of charge. In addition, under the CPRA/CCPA, California residents have the explicit right to non-discrimination in retaliation for exercising any of their privacy rights.
- Right to delete You have the right to request deletion of the personal information collected from you and to tell the service providers to do the same, subject to certain exceptions (e.g., if the business is legally required to keep information)
- Right to correct inaccurate information
- Right to opt out of the “sale” or “sharing” of personal information You may request the business stop selling or sharing your personal information (“opt-out”). Unless you later authorize the business to do so again, the business cannot sell or share your personal information after they receive your opt-out request.
- Right to data portability You have the right to request a copy of your personal data in a structured and commonly used format and to transmit or move such personal data to another environment/processor/controller.
- Right to access and opt-out of automated decision making You also have the right, under applicable regulations, to request information about the logic behind automated decision-making that affects you, the result of those processes and to opt out. Automated decisions that can affect you includes profiling, which refers to any form of automated processing of personal information, to evaluate certain personal aspects relating to a natural person, particularly in order to analyze or predict aspects concerning that natural person’s such as economic situation, health, personal preferences, interests, behavior, location, or movements.
- Right to limit use and disclosure of SPI To the extent any sensitive personal information is collected from you (e.g., log-in & account credentials, health, precise geolocation, religious or philosophical beliefs or racial/ethnic origin, you can direct the business to only use your sensitive personal information for limited purposes, such as providing you with the services you requested, if the business does not already do so.
A "Do Not Sell My Personal Information" link appears in the site footer, linking to Section 6 of this Privacy Policy (“Your Privacy Rights”), which describes your right to opt out of the sale or sharing of personal information. A "Cookie Preferences" button in the footer allows users to reopen the consent banner and change their selection at any time.
To exercise your privacy rights, contact us at: support@foliaplanner.com.
GDPR (EU/UK Users)
For Users who are located in the EU/UK, you have rights under the GDPR. These include similar or equivalent rights to the above list and potentially additional rights (as compared to certain US states). By default, as part of Folia’s privacy by design approach, and where required, we obtain your consent before using non-essential cookies or processing personal data for analytics and advertising. We do not sell personal information for monetary compensation. However, certain uses of cookies and advertising technologies may be considered a “sharing” of personal information under applicable law. Under the GDPR, pseudonymized data is not automatically considered “personal data”.
Guest Rights
Guests located in the EU are considered data subjects under GDPR, which protects their personal data and affords them all the same rights, regardless of whether they are account holders or whether they submit their mailing addresses directly via a link. Guests located in Canada are covered under PIPEDA and applicable provincial privacy laws. Guests who are residents of US states are covered as consumers whose personal information is protected under their applicable state regulation.
If you are a guest and your information has been submitted to Folia either on your behalf or directly, of your own accord (e.g., via a link):
- You may request exercise your applicable rights, such as access to or deletion of your information, by contacting support@foliaplanner.com
- We will promptly process such requests in coordination with the relevant Registered User where appropriate.
7. Control of Your Information including Guest Data and Other Third-Party Information
Folia’s Registered Users (couples and planners) may upload personal information including personal information about third parties, such as wedding guests. Please see Section 1(b) – (c) for more details about the personal information that might be provided. You have control over your personal data and how it is collected, used, and shared by exercising your rights as outlined under Section 6. Roles with respect to data, as understood under applicable laws, such as data controller/processor (GDPR) or business/service providers (CPRA/CCPA) depend on the specific context, data involved, and action taken. In practice, it is possible for an entity to hold dual roles depending on the aforementioned factors.
A) Controller /Processor Roles
- When Users choose to submit or upload information to Folia and/or delete such information, including but not limited to vendor lists and guest information, the User acts as the data controller with respect the provided information and Folia acts as a data processor, processing such information solely to provide the Services as requested.
- For guests located in the EU/UK, regardless of whether or not they submitted their data directly via a link, account holders who are professional wedding or event planners act as the data controller with control over what data is collected, storing, accessing, and/or deleting that data via Folia and Folia acts as the data processor as instructed by the data controller.
- When Folia utilizes 3rd party service providers to execute and/or provide Services to Users, such as maintaining the website or software, storage on servers, authentication, or processing payments, under the GDPR, Folia acts as the data processor and the 3rd party service providers act as sub-processors under the GDPR, executing instructions under Folia, which is carrying out the Services at User’s request.
- Folia acts as a data controller with respect to internal systems information or information that is not User managed, such as HR & employee data and 3rd party service providers it engages to process any such data acts as the data processor.
B) User Responsibilities
Users are solely responsible for:
- Ensuring they have provided the necessary notice and obtained the proper consents and permissions to provide personal information about third parties to Folia. For wedding guests that may be under 18 years old, Users are responsible for obtaining the appropriate parental consents.
- Complying with applicable privacy and data protection laws when using the Services.
Folia is not responsible for taking steps to notify or obtain consents or otherwise verifying proper consents are in place except as outlined in this Privacy Policy.
8. Data Retention Policy
We retain personal information:
- For the duration of an active account
- Until account deletion by the user
- For up to three (3) years after the wedding date for inactive accounts
Guest data is retained under the same schedule. Payment records are retained by Stripe in accordance with legal and financial requirements.
9. Data Security
We implement reasonable technical and organizational measures to protect personal information, including the below measures.
- Encryption in transit
- Secure authentication systems
- Controlled access to systems
However, no method of transmission or storage is completely secure. Registered Users are advised to keep their account passwords safe. Do not share your password or account.
10. Public Visibility of Data
Folia does not create publicly accessible wedding pages, user profiles, or searchable directories. All personal information entered into the platform is private and accessible only to the authenticated account holder(s) authorized by the Registered User.
11. Children’s Privacy
The Services are not intended or designed for nor marketed to individuals under 18 years old. Folia does not knowingly collect personal information from individuals under 18, including children under 13. If you are under 18, please do not use our Services or send Folia your personal information. Upon being made aware of any personal information collected from a child under 13 without proper verifiable parental notice and consent as required under COPPA, Folia will promptly delete such information. If you believe we may have personal information from or about an individual under 18 that was provided to Folia without proper verifiable parental consent, please contact support@foliaplanner.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date.
In the future, we may offer wedding vendors and service providers the ability to promote their services to users on our platform. Any such program will be designed to protect user privacy. We do not intend to sell or disclose your personal information to participating vendors. We will update this Privacy Policy with full details, including any opt-out rights, before any such program is launched.
13. Contact Us
If you have questions about this Privacy Policy or your data, contact: support@foliaplanner.com
