Privacy Policy

Who we are

The Overseas Aisle ("we", "us") is operated by Ian J. Battaglia, Tokyo, Japan. Questions or requests: support@overseasaisle.com.

What we collect

• Your email address. You sign in with an emailed 6-digit code (or with Google, if you choose that option). We store your email and the date you joined. We don't store passwords.
• What you enter in the dashboard. Your wedding profile, budget, guest list, calendar, day-of schedule, vendor quotes, music and photo lists, and proxy checklist. This can include other people's names, contact details and dietary needs (for example guests, wedding party members and vendors). Please only enter what you need for planning.
• Payment records. Payments are handled by Stripe. We never see or store your card number. We keep Stripe's session and payment identifiers, the amount, and whether the purchase is active or refunded.
• Proxy share links. If you create a share link, we store a one-way hash of the link, who it's for (your label), whether it can edit, and when it was last opened.
• A session cookie. One strictly necessary cookie keeps you signed in. We don't use advertising or cross-site tracking cookies, and we don't run analytics scripts on this site.

Who processes your data

• Cloudflare hosts the website and stores the database. Data may be processed in the countries where Cloudflare operates.
• Resend delivers the sign-in code emails.
• Stripe processes payments.
• Google serves the fonts used by our pages (your browser requests them from Google's servers), and processes the sign-in if you choose "Continue with Google".

We don't sell your data and we don't share it for advertising. We may disclose information if the law requires it.

Who can see your planning data

Only you, through your signed-in account, and anyone you give a proxy share link to. A share link shows your checklist tasks, notes, partner names, wedding date and venue, and your proxy's name. It does not show your budget, guest list, contact details or anything else. Anyone holding the link can see that view, so share it only with people you trust, and revoke it from the Proxy page whenever you like.

Your choices

• Export: download everything you've entered as a JSON file from the Account page, at any time, including after a trial ends.
• Delete: delete your account from the Account page. This immediately removes your account, planning data, sessions and share links. We keep the payment record, with your account link removed, because we need it for accounting. Copies may remain in provider backups for a limited period.
• Other requests: if you're in the EU, UK, Japan or elsewhere with data-protection rights, email us to ask about access, correction or deletion and we'll respond within a reasonable time.

Retention

We keep your data while your account exists, until you delete it.

Security

Traffic is encrypted in transit. Sign-in codes expire after 10 minutes and are stored only as keyed hashes. Share-link tokens are stored only as hashes. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you.

Children

The service is for people 18 and over.

Changes

If we change this policy in a meaningful way, we'll update the date above and, for significant changes, email account holders.