Acceptable Use Policy

1. Who this applies to#

This policy applies to the registered user, to any wedding planner or co-planner they invite, and to anyone who enters content through a link the user has shared - typically a guest sending an RSVP or uploading a photo. For such contributors the contractual consequences of the Terms do not apply; the Provider may remove their content or disable the relevant link (Section 6). You are responsible for sharing those links only within a circle where this policy can realistically be observed.

2. Prohibited content and conduct#

It is prohibited to enter, store or publish through the Service:

• content that violates the law, including content that directly incites or promotes a criminal offence;
• content that sexually exploits, abuses, sexualises or endangers a minor - the strictest category, handled under Section 6 with immediate measures where needed;
• hateful or inciting content directed at a group, or harassment, threats or intimidation directed at an individual;
• content that encourages, instructs, glorifies or meaningfully assists violence, suicide or self-harm (asking for help or supporting someone is not prohibited);
• intimate, nude or sexualised depictions of a person without that person's consent, and any sexualised or intimate depiction of a minor, whatever consent is claimed;
• another person's private details (home address, phone number, workplace, whereabouts) published without that person's prior knowledge and agreement, or without another valid legal basis;
• impersonation of another person, organisation or of the Provider;
• content you are not entitled to use (copyright or trademark infringement);
• unsolicited commercial messages, spam, chain messages, or resale of the Service or of its templates;
• deceptive content, in particular fake reviews or endorsements, or content presented as a genuine customer opinion when it is not.

3. Special rules for guest pages and guest photos#

A published guest page is not password protected: anyone who knows the link can open it. Three practical rules follow:

• Contact persons. If you publish a name, role and phone number on the guest page (witness, master of ceremonies, parent), that is their personal data. Publish it only with their prior knowledge and agreement. The interface warns you at that point, but the decision is yours. You can unpublish the page and close a photo collection at any time; a personal invitation link stops working when you remove the guest from the list, and expires after one year in any case.
• Personal invitation links. A link copied from the guest list contains a token that identifies that specific guest. Do not post it to a public group or social feed: whoever receives it can see that guest's arrangements and response.
• Guest photos. People appearing in uploaded photos are identifiable too. Do not open the collection to a circle unaware of it, and do not use the photos outside the wedding without the consent of the people in them.

The Provider does not pre-screen content placed on guest pages or in photo collections. On a report, it acts under Sections 5 and 6.

4. Technical abuse#

It is prohibited to:

• gain unauthorised access to the systems behind the Service, circumvent a security measure or access control, or access another user's account;
• overload the Service or its infrastructure, or disrupt its normal operation;
• extract data by automated means (bots, scripts, crawlers), including bulk downloading of published guest pages;
• circumvent plan limits (AI message count, number of vendors, number of wedding profiles) by creating multiple accounts or by technical means;
• reverse engineer or decompile the Service, or build a derivative service from it;
• reuse one purchased access across several unrelated weddings or transfer it to someone else. One subscription belongs to one wedding project; the planner plan, which is explicitly designed to manage several clients, is the exception;
• upload malware or other code designed to compromise the Service or another person's device, guess or generate invitation or upload tokens, or try passwords in bulk (credential stuffing).

Security testing that circumvents a security measure falls under the first item of this list unless the Provider has given prior written permission. If you discover a security flaw, please do not exploit it - report it to hello@yourweddingcopilot.com. The Provider will not take action against a good-faith, responsible disclosure, provided you do not access, copy, alter or disclose data beyond what is reasonably necessary to verify and report the flaw.

5. Reporting a violation#

If you believe that content or conduct reachable through the Service - on a guest page, in an uploaded photo or elsewhere - breaches this policy, the law or someone's rights, report it to hello@yourweddingcopilot.com. A report can be handled quickly if it includes, where available:

• the exact web address (URL) of the content, or an identifiable reference to the photo;
• a description of the problem, the relevant date, and why it is unlawful or breaches this policy;
• for a copyright or trademark complaint, a statement that you are the rightsholder or its representative, and a good-faith statement that the use is unauthorised;
• for a complaint about published personal data, a statement that you are the data subject or their representative;
• your name and contact details so we can respond.

Where you give contact details, we confirm receipt without undue delay, may ask for further information needed to assess the report, and tell you what we decided and how you can seek redress. Anonymous reports are accepted, but we cannot respond to them and the merits are harder to assess.

We process the personal data in a report only to assess, investigate and document it, to communicate with the reporter and the affected user, and to meet legal obligations, as described in the Privacy Policy. We do not pass the reporter's identity to the affected user unless the law requires it.

6. What happens after a report#

The Provider assesses the report on the basis of the available information and takes a measure proportionate to the nature, severity, urgency and repetition of the breach. The usual range of measures is:

1. a warning and a request to remove or amend the content;
2. removal of the content or unpublishing of the guest page;
3. restriction or disabling of a feature, link or sharing function (for example the photo collection);
4. temporary suspension of the account, and termination for serious or repeated breaches.

This is the usual range, not a mandatory sequence. Where the report concerns content that sexually exploits, abuses or endangers a minor, non-consensual intimate imagery, a credible threat against a named person, or another risk of serious and imminent harm, and the Provider has reasonable grounds to suspect that the report is well founded, it may immediately restrict access, remove the content or suspend the account while the matter is assessed. A report alone does not trigger an automatic suspension. A breach counts as repeated if a materially similar breach follows a warning, a removal or an earlier restriction, or if earlier measures are deliberately circumvented.

For people who are not registered users (for example a guest who sends an RSVP or uploads a photo), the measure is the removal of the content or the disabling of the relevant link; the contractual consequences of the Terms apply to the user and to the co-planners they invite.

Statement of reasons. The affected user is notified of the measure by email, stating the main facts and circumstances, the part of this policy or the law relied on, the measure taken and its duration where temporary, whether automated means were used (they are not: every decision is made by a person), and how to request a review. Details may be withheld where disclosure would compromise another person's privacy or safety, an investigation, the preservation of evidence or a legal obligation.

Review. Within 15 days of the notice being sent, the user may request a review at the address above, pointing out factual errors, adding context or contesting the application of this policy. The Provider examines the request on its merits and gives a reasoned decision without undue delay. If the measure turns out to have been wrong, it is reversed and access is restored.

Data during a suspension. The user's data is preserved during a suspension, and the user may export it (Section 20 of the Terms), unless the law or the need to prevent serious harm to others prevents this.

Retaining reported content. The Provider may keep a restricted copy of reported content and the related records for as long as reasonably necessary to assess the report, handle a review, comply with the law, establish or defend legal claims or prevent repeated abuse (Privacy Policy, Section 4). Access to it is restricted.

Authorities. The Provider discloses content or account data only where required by law, a binding order of a competent authority or a court. If information gives rise to a suspicion of a criminal offence involving a threat to the life or safety of a person, the Provider informs the competent authorities as the law requires.

If, as a consumer, you wish to challenge how the Provider handled the matter, the available forums are listed in Section 17 of the Terms.