Data privacy and security
How WedSites protects your wedding data and your guests' information.
Your wedding website holds your guests' names, emails, and addresses. Here's how we protect it. For the full details, see our privacy policy and the privacy policy overview.
Our commitments
We never sell your data or your guests' data.
We never use it to train AI. Not your website, not your photos, not your guest list, not your RSVPs.
We block AI crawlers from your website. AI-training bots like GPTBot, ClaudeBot, Google-Extended, and CCBot are blocked from every wedding website on WedSites. This is always on.
Encryption
Every WedSites website, including custom domains, is served over HTTPS. Everything between your guests and your website (page views, check-ins, RSVP submissions) is encrypted, and so is everything between you and your dashboard.
Passwords are stored encrypted. Nobody at WedSites can see your password.
Payments
Payments are processed by Stripe, which is certified to PCI DSS Level 1, the highest standard for payment security. Your card details go straight to Stripe and never touch WedSites servers.
Who can see your data
You and the users you add. Anyone you add under Settings > Users can see the parts of your account their permissions allow. Only add people you trust.
WedSites and our service providers. Our team and the providers we use to run WedSites (such as hosting, email delivery, and payment processing) handle your data to provide the service. The privacy policy overview lists who we disclose data to.
Not other customers. Other WedSites customers can't see your guest list, RSVPs, or planning data.
Keeping your website private
Your website is only as public as you make it:
Unpublished sites are only visible to you and your users.
Search engines are blocked by default. Your site won't show up on Google unless you turn indexing on in your site settings.
Password protection lets you require an access code before anyone can see your site (any paid plan). Choose a code you can share with guests, not your account password.
Guest check-in lets you show pages only to guests on your guest list (Standard and Pro).
Guests don't need to create an account to view your site or RSVP.
Exporting your data
You can download your data any time: guest list, RSVP responses, budget, vendors, payments, and seating as CSV files, plus a static HTML backup of your website. See How do I export my data?
Deleting your data
You can delete your wedding account yourself from Settings > Account. Your website, guests, RSVPs, and planning data are permanently deleted. See Deleting a wedding account
Stopping abuse
We screen outgoing emails for phishing and spam before they're sent, and we automatically suspend sending for accounts with high bounce rates. When an email is flagged as suspicious, its content may be checked by an AI service to decide whether it's safe to send. It is never used to train AI. This protects your guests and keeps WedSites emails landing in inboxes, not spam folders.
Security limits
We use physical, electronic, and management safeguards to protect your information, but no system is completely secure, and we can't guarantee the security of information sent over the internet.
Keeping your account safe
Use a strong password you don't use anywhere else
Log out on shared computers
Remove users from Settings > Users when they no longer need access
Questions
Email [email protected] for anything privacy-related, or contact support for anything else.