Legal

Privacy Policy

Last updated: March 22, 2026

Almour (“we”, “us”, “our”) is a wedding planning application operated from Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service at almour.app.

By using Almour, you consent to the collection and use of your information as described in this policy. If you do not agree, please do not use the service.

1. Information We Collect

We collect the following categories of personal information:

Account Information

• Name, email address, and authentication credentials (via Auth0)
• Profile information you provide (partner names, wedding date, location)

Wedding Planning Data

• Checklist items, budget entries, vendor selections, and notes
• Wedding website content, vow drafts, and invitation designs
• Day-of timeline and seating chart data

Guest Information

• Guest names, email addresses, phone numbers, and dietary restrictions
• RSVP responses and party size information
• Photos uploaded by guests via shared album links

Usage Data

• Device information, browser type, IP address, and pages visited
• Feature usage patterns and session duration

2. How We Use Your Information

We use your information to:

• Provide and operate the Almour wedding planning service
• Generate AI-assisted content (vow drafts, vendor emails, planning insights) using the Anthropic Claude API
• Generate AI-assisted invitation cards and wedding website backgrounds using Google Imagen
• Process payments and manage subscriptions via Stripe
• Send transactional emails (account confirmations, RSVP notifications, password resets)
• Improve the service based on aggregated, anonymized usage data

We do not use your personal information for advertising. We do not sell or share your personal information with third parties for their marketing purposes.

3. Guest Data

Guest Information: When you use Almour's guest list or invitation features, you may provide us with personal information about your wedding guests, including their names, email addresses, and dietary preferences. By providing this information, you confirm that you have obtained any necessary permissions to share it with us. We use guest information solely to provide you with the Almour service — specifically to send RSVPs, generate seating charts, and send invitations on your behalf. We do not use guest information for marketing or share it with third parties beyond what is necessary to provide these services.

Guest-Uploaded Photos: Photos uploaded by your guests via your Almour photo sharing link are stored securely and are only accessible to you and people you share your album link with. We do not use guest-uploaded photos to train AI models.

Guest information and guest-uploaded photos are automatically deleted 12 months after your wedding date, unless you request earlier deletion.

4. Third-Party Services

We use the following third-party services to operate Almour. Each processes limited categories of your data:

• Auth0 — Authentication and login (name, email)
• Stripe — Payment processing (payment details are handled entirely by Stripe; we never see your card number)
• Anthropic (Claude API) — AI-assisted content generation (wedding data shared in context for relevant features only)
• Google Cloud (Imagen, Cloud Storage) — Image generation and photo storage
• Vercel — Frontend hosting and edge delivery
• Railway — Backend hosting and database
• SendGrid — Transactional email delivery

5. Data Retention

We retain your data as follows:

• Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
• Wedding planning data: Retained as long as your account is active.
• Guest data: Automatically deleted 12 months after your wedding date.
• Guest-uploaded photos: Automatically deleted 12 months after your wedding date unless you download or save them.
• Payment records: Retained as required by applicable tax and financial regulations.

6. Your Rights

Depending on your jurisdiction, you have the right to:

• Access — Request a copy of all personal data we hold about you
• Correction — Request correction of inaccurate information
• Deletion — Request deletion of your account and all associated data
• Portability — Request your data in a machine-readable format (JSON)
• Withdraw consent — Withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at privacy@almour.app.

7. Cookies

Almour uses essential cookies required for authentication and session management. We do not use advertising cookies or tracking cookies. Session cookies are deleted when you close your browser. Authentication cookies persist for up to 30 days to keep you signed in.

8. Data Security

We protect your data using industry-standard security measures including HTTPS encryption on all pages, encrypted database storage, and access controls. Payment information is handled entirely by Stripe and is never stored on our servers. Photo uploads are stored in Google Cloud Storage with signed URL access controls.

9. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will notify affected users directly via email within 72 hours of discovery, and report the breach to the Privacy Commissioner of Canada as required under PIPEDA.

10. Children's Privacy

Almour is not intended for use by anyone under 16 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 30 days before they take effect. The “Last updated” date at the top of this page reflects when the policy was last revised.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, contact our Privacy Officer:

Email: privacy@almour.app
Almour
Ontario, Canada