Privacy Policy

Pressed Love is a trading name of Fabricate, LLC, a Delaware, United States limited liability company, 1111B S Governors Ave STE 39501, Dover, DE 19904, US. We are the controller of the personal data described in this policy, except where section 4 says we act for a couple. Contact: hello@pressedlove.com.

From couples (our customers): • Account data: name, email address and sign-in details (through our sign-in provider) • Invitation content: names, wedding dates, venues, schedules, stories, photos, videos and music you add • Guest list data you add: guest names, email addresses, phone numbers, groups, plus-ones and notes • Purchase data: plan, price, currency, country and payment status. Card details go directly to Stripe; we never see or store full card numbers • If you buy Premium: the brief you send us (the look you want, your story, your initials for a monogram and which stationery you want) and the photo of your venue we paint from • Messages you send us by email or in the support chat • If you came through another couple's referral link: which couple's link it was, so we can apply your discount and send them their reward. We do not tell them who you are From people who buy a gift voucher for a couple: • The plan, the names and message you write for the certificate, the language you bought in, and the email address Stripe collects at checkout, which we use to send you the code. Card details go directly to Stripe From people who pay for a couple's invitation through a pay link the couple sends them: • The name, email address and country Stripe collects at checkout, which reach us with the payment and are used only for that payment (its record, refunds and accounting). We never send you marketing. Card details go directly to Stripe From guests: • RSVP replies and anything a guest types into the RSVP form (attendance, meal choices, dietary needs, song requests, messages) • Contact details a guest leaves on a couple's save the date: their name, an email address or phone number, how many are coming and with whom, an optional note and, only when the couple asks for it, a postal address • The email address of a guest who ticks the optional box to hear from us (see section 4) From everyone who visits the site: • Technical data needed to run the site: IP address, browser and device type, pages requested • Only when optional cookies are allowed (see section 9): usage analytics, session recordings with everything typed into forms hidden, the page or ad that brought you here (including ad click identifiers), and advertising measurement events such as a completed purchase

• To create, host and deliver your invitation, collect RSVPs and run your dashboard: performance of our contract with you • To make a Premium couple's invitation, venue painting, monogram and stationery from their brief: performance of our contract with you • To take payment, issue receipts and meet tax and accounting duties: contract and legal obligation • To issue a gift voucher, email its code and certificate to the buyer and apply it when the couple uses it: performance of our contract with the buyer • To apply a referral discount and pay the couple who referred you their reward: performance of our contract with each couple • To take a payment from someone a couple sent a pay link to, and record it on the couple's order: performance of our contract with the couple • To send service emails (receipts, RSVP notifications, reminders you set up): contract • To send customers tips and offers about Pressed Love: our legitimate interest, or your consent where the law requires it. Every such email has an unsubscribe link • To keep the service secure and prevent fraud and abuse: legitimate interest • Analytics, session recordings and advertising measurement: your consent where you are asked (the EU, EEA, UK, Switzerland, Canada and all other regions outside the United States); in the United States, our legitimate business purposes subject to your right to opt out (section 8)

When a couple adds guests, a guest replies to an invitation, or a guest leaves their contact details on a couple's save the date, we process that guest data on the couple's behalf and only to deliver the invitation, collect RSVPs and send the messages the couple chooses. Details left on a save the date go onto that couple's guest list and are used for their invitation only. The couple decides who is invited and is responsible for having the right to share their guests' details with us. We never use guest data for our own marketing, with one exception: a guest who ticks the optional, unticked box on the RSVP form asking to hear from us. A save the date offers no such box. We record the wording they saw and when, send at most two emails, and stop at once if they unsubscribe. Invitation and save-the-date pages are not indexed by search engines and do not load analytics or advertising cookies unless that guest has accepted them.

We do not sell personal data for money. We share data only with providers that help us run Pressed Love, under contracts that limit their use of it: • Vercel: website hosting and delivery (application servers in Dublin, Ireland, with a global network) • Supabase: database and file storage for accounts, invitations, guest lists (including details guests leave on a save the date) and uploads • Clerk: sign-in and account security (United States) • Stripe: payment processing, including the payment form shown inside our own pages, whose card fields belong to Stripe (United States and Ireland) • Resend: sending email (United States) • Crisp: support chat in the dashboard (France) • Google Translate: when a page, or an invitation for guests who read another language, is shown in a language we have not written by hand, its text is sent to Google to translate (United States) • Google Maps: maps on invitations (United States) • QR Server (api.qrserver.com): draws the QR code for an invitation or save-the-date link; it receives that link and nothing else • Higgsfield: for a Premium couple, makes the painting of their venue from the venue photo they add, with an image model it runs for us (United States). It receives that photo and our written description of the design's style, not names or guest data Only when optional cookies are allowed: • PostHog: product analytics and session recordings (United States) • Google Analytics, Google Tag Manager and Google Ads: measurement and advertising (United States) • Meta (Facebook and Instagram) and TikTok: advertising measurement, including purchase events, and for TikTok the creation of a new account, that we send from our servers so ads can be matched to sales and sign-ups (United States) In the US, some state laws treat giving advertising partners this data as "sharing" or "targeted advertising". You can opt out (section 8). We may also disclose data if the law requires it, or to a buyer of our business, which would remain bound by this policy.

• Account, invitation and guest data: for as long as your account exists, so your invitation stays online. When you ask us to delete your account, we delete it within 30 days • Details guests leave on a save the date: part of the couple's guest list, kept and deleted with it. The save-the-date page stops accepting details once the invitation is published, and 30 days after the date it announces • Draft preview links: expire 7 days after you share them • A Premium brief and venue painting: with your invitation, as above. The venue photo we send to Higgsfield to paint stays in our Higgsfield workspace under Higgsfield's own retention settings • Payment and tax records: for as long as tax and accounting law requires, even after account deletion • Gift vouchers (the code, the names and message on the certificate, the buyer's email and when the code was used): kept with payment records, as above • Guest marketing opt-ins: until the guest unsubscribes or after the second and final email • Analytics and advertising data: kept by the providers above under their own retention settings, and no longer than needed for measurement

Wherever you live, you can ask us to access, correct or delete your personal data, or to export it; couples can also export their guest list from the dashboard. In the EU, EEA, UK and Switzerland you also have the right to restrict or object to processing, to withdraw consent at any time (without affecting processing before withdrawal), and to complain to your local data protection authority. In US states with privacy laws, you have the right to know, access, correct and delete your data, to opt out of sale, sharing and targeted advertising, and to appeal our decision on a request. You may use an authorised agent. We do not discriminate against anyone for using these rights. To make a request, email hello@pressedlove.com from the address on your account. We may need to confirm your identity, and we reply within one month (45 days where US law applies). Guests can ask us directly or through the couple.

In the European Economic Area, the United Kingdom, Switzerland, Canada and every other region outside the United States, optional analytics and advertising cookies stay off until you choose "Accept" in the cookie banner. In the United States, these cookies are on by default and you can opt out at any time: • Choose "Opt out" in the cookie notice, or use the "Your privacy choices" link in the footer • Turn on Global Privacy Control (GPC) in your browser; we treat it as an opt-out of sharing and targeted advertising automatically • Email hello@pressedlove.com Opting out stops our advertising partners from receiving your browsing and purchase events from our site. We do not discriminate against you for exercising these rights.

Our Cookie Policy at https://pressedlove.com/cookies lists every cookie we use, what it does and how long it lasts.

We are a US company and several of our providers are in the United States, so your data may be processed outside your country. Where EU, EEA, UK or Swiss law applies, transfers rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission's Standard Contractual Clauses.

Data travels over encrypted connections, access to our systems is limited to people who need it, and card payments are handled entirely by Stripe. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Pressed Love is for adults planning an event. We do not knowingly collect data from children under 16, except where a couple lists a child as a guest; in that case the couple provides only what the invitation needs.

We update this policy when our practices change and show the date at the top. We tell customers about significant changes by email or with a notice on the site.

For any privacy question or request, contact us at hello@pressedlove.com.