Skip to content

Privacy Policy

Last Updated: February 18, 2026

Viyaah ("Viyaah," "we," "us," or "our") operates the website and platform located at https://viyaah.app (the "Service"). Viyaah is a product of Juice Automation, founded by Justin Dosanjh, based in British Columbia, Canada.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our Service. Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

---

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, use our features, or contact us, we may collect:

  • Account Information: Full name, email address, and password.
  • Wedding Details: Wedding date, venue information, partner names, wedding party details, event schedules, and other content you provide for your wedding website.
  • Guest Information: Guest names, email addresses, mailing addresses, phone numbers, RSVP responses, dietary preferences, meal selections, and group/family associations.
  • Vendor Information: Vendor names, contact details, service categories, contract notes, and related correspondence.
  • Budget and Financial Planning Data: Budget categories, estimated and actual costs, vendor payment tracking, and related financial planning notes.
  • Payment Information: When you purchase a paid plan, your payment is processed by Stripe, Inc. ("Stripe"). We do not directly collect or store your full credit card number, expiration date, or CVV. We receive from Stripe a transaction confirmation, the last four digits of your card, card brand, and billing address. Please refer to Stripe's Privacy Policy for details on how Stripe handles your payment data.
  • Communications: Any messages, feedback, or support inquiries you send to us.

1.2 Information Collected Automatically

When you access the Service, we may automatically collect:

  • Log and Usage Data: IP address, browser type and version, operating system, referring URLs, pages visited, features used, timestamps, and clickstream data.
  • Device Information: Device type, unique device identifiers, and screen resolution.
  • Cookies and Similar Technologies: See Section 5 (Cookies and Tracking Technologies) below.

1.3 Information from Third Parties

We may receive limited information from third-party services you use to interact with Viyaah, such as single sign-on (SSO) providers (e.g., Google), which may share your name, email address, and profile picture with your authorization.

---

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide and Maintain the Service: Creating and managing your account, generating your wedding website, processing RSVPs, managing guest lists, tracking vendors and budgets, and delivering the core functionality of the platform.
  • To Process Payments: Facilitating one-time purchases of paid plans through Stripe.
  • To Communicate with You: Sending transactional emails (e.g., account verification, RSVP notifications, payment confirmations), responding to support requests, and providing service-related announcements.
  • To Improve the Service: Analyzing usage patterns, diagnosing technical issues, and developing new features.
  • To Ensure Security: Detecting and preventing fraud, abuse, and unauthorized access.
  • To Comply with Legal Obligations: Meeting applicable legal, regulatory, or contractual requirements.

We do not sell your personal information to third parties. We do not use your wedding details, guest lists, or vendor information for advertising or marketing purposes unrelated to the Service.

---

3. How We Share Your Information

We may share your personal information only in the following circumstances:

3.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

| Provider | Purpose | Data Shared | Privacy Policy | |---|---|---|---| | Supabase, Inc. | Backend infrastructure, database hosting, authentication | Account data, wedding details, guest data, vendor data, budget data | supabase.com/privacy | | Stripe, Inc. | Payment processing | Billing name, billing address, payment method details | stripe.com/privacy | | Analytics Providers | Usage analytics and performance monitoring | Anonymized/pseudonymized usage data, IP address, device information | Varies by provider |

These service providers are contractually obligated to use your information only as necessary to provide their services to us and in accordance with applicable privacy laws.

3.2 Data Storage Location

Our backend infrastructure is hosted by Supabase, Inc., with data stored on servers located in the United States. By using the Service, you acknowledge and consent to the transfer of your personal information to the United States. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable privacy laws, including the use of Standard Contractual Clauses where required.

3.3 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before your information becomes subject to a different privacy policy.

3.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

---

4. Your Wedding Website and Public Information

If you create a wedding website through Viyaah, certain information you choose to include—such as your names, wedding date, event details, photos, and stories—may be accessible to anyone who has the link to your wedding website. You control what information appears on your wedding website. Guest-facing RSVP forms will collect responses that are stored in your account and are accessible only to you.

We recommend that you exercise discretion when deciding what personal information to display publicly on your wedding website.

---

5. Cookies and Tracking Technologies

5.1 What We Use

We use cookies and similar technologies to:

  • Essential Cookies: Maintain your session, authenticate your identity, and ensure the Service functions correctly. These cookies are strictly necessary and cannot be disabled.
  • Analytics Cookies: Understand how users interact with the Service, measure performance, and identify areas for improvement. These may be provided by third-party analytics services.
  • Preference Cookies: Remember your settings and preferences (e.g., language, display options).

5.2 Your Choices

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling essential cookies may impair the functionality of the Service.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions requiring affirmative consent, we will obtain your consent before placing non-essential cookies.

---

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account and Wedding Data: Retained for the duration of your account. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.
  • Payment Records: Transaction records are retained for a minimum of 7 years to comply with tax and financial reporting obligations.
  • Log and Analytics Data: Retained in anonymized or aggregated form for up to 24 months.

You may request deletion of your account and associated data at any time (see Section 7).

---

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Rights for All Users

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information and account.
  • Data Export: Request a portable copy of your data in a structured, machine-readable format (e.g., JSON or CSV).
  • Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

7.2 Additional Rights Under GDPR (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, you also have the right to:

  • Restrict Processing: Request restriction of processing of your personal data under certain circumstances.
  • Object to Processing: Object to processing of your personal data based on legitimate interests.
  • Lodge a Complaint: File a complaint with your local data protection authority.

Legal Bases for Processing (GDPR): We process your personal data on the following legal bases:

  • Performance of a Contract: To provide the Service pursuant to our Terms of Service.
  • Legitimate Interests: To improve the Service, ensure security, and communicate with you, where such interests are not overridden by your data protection rights.
  • Consent: Where you have given explicit consent (e.g., for non-essential cookies or marketing communications).
  • Legal Obligation: To comply with applicable laws and regulations.

7.3 Additional Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose.
  • Delete your personal information, subject to certain exceptions.
  • Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined under the CCPA/CPRA.
  • Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

Categories of Personal Information Collected (preceding 12 months):

| Category | Examples | Collected | |---|---|---| | Identifiers | Name, email, IP address | Yes | | Commercial Information | Purchase records, plan tier | Yes | | Internet/Network Activity | Browsing history, usage data | Yes | | Geolocation Data | Approximate location via IP | Yes | | Sensory Data | Photos uploaded to wedding site | Yes, if provided | | Professional Information | Vendor details | Yes, if provided |

7.4 Canadian Privacy Rights (PIPEDA)

As a Canadian business, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). You have the right to:

  • Access your personal information held by us.
  • Challenge the accuracy and completeness of your information.
  • Withdraw consent for the collection, use, or disclosure of your information, subject to legal or contractual restrictions.

7.5 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

Email: justin@juiceautomation.com

We will respond to verified requests within 30 days (or sooner if required by applicable law). We may need to verify your identity before fulfilling your request.

---

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Secure authentication mechanisms, including password hashing and optional multi-factor authentication.
  • Role-based access controls limiting internal access to personal data.
  • Regular security assessments and monitoring.

While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

---

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe that a child under 16 has provided us with personal information, please contact us at justin@juiceautomation.com.

---

10. Third-Party Links

The Service may contain links to third-party websites, services, or resources that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

---

11. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than your country of residence, including the United States (where our infrastructure provider, Supabase, hosts data) and Canada (where we are based). We take steps to ensure that your data receives an adequate level of protection in accordance with applicable laws, including the use of Standard Contractual Clauses, adequacy decisions, or other approved transfer mechanisms.

---

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Notify you via email or through a prominent notice on the Service.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

---

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Viyaah — a product of Juice Automation Justin Dosanjh British Columbia, Canada Email: justin@juiceautomation.com

---

*This Privacy Policy is provided for informational purposes and does not constitute legal advice. We recommend consulting with a qualified legal professional to ensure compliance with all applicable laws and regulations.*