Privacy Policy

Information We Handle

• Accounts and business settings: names, email addresses, sign-in credentials and sessions, business contact details, branding, preferences and connected-service identifiers. Passwords are stored as hashes.
• Business records: emails, messages, attachments, contacts, inquiries, event details, schedules, calendar entries, contracts, signatures, invoices, expenses and payment status. Forms and messages may contain personal details supplied by a customer, such as service preferences or allergy information.
• Connected services: information you authorize us to access through Instagram, Google Calendar or other enabled integrations, and access tokens needed to keep those connections working.
• Technical and support records: request and error logs, device/browser and network information, authentication and security events, usage records, and messages you send us for help.

Instagram Messages and Photos

When you connect a professional Instagram account, we receive its account ID, username, profile details and the permissions you grant. We store its access token encrypted. Instagram handles its own sign-in; BrideBooked does not ask for your Instagram password.

With message access, we receive direct messages and available conversation history, sender identifiers and profile information, message timestamps, attachments, and supported read, edit, reaction and deletion events. We use these to display conversations in your inbox, associate customers with contacts and bookings, prepare suggested replies and send replies or enabled booking messages through Instagram.

We also import your account's own feed photos and available media previews, captions, post links and dates. Selected photos become public when you enable or embed your BrideBooked portfolio. Private messages are not published in the portfolio.

For example, a customer's bridal makeup inquiry can appear in your inbox with a suggested reply and a draft booking. A photo you select for your portfolio can appear on your public website.

How We Use Information and AI

We use information to operate your account, deliver communications, manage business records, synchronize connected services, process payments, support you, prevent abuse and investigate failures.

BrideBooked's AI features process relevant message content, attachments, business context and prompts to classify inquiries, summarize conversations, suggest replies and assist with business tasks. This includes Instagram messages processed through the inbox assistant. Relevant data is sent to the AI providers configured for those features, which may include OpenAI, Google Vertex AI and models accessed through OpenRouter. Generated responses and business records can be saved in your account. Review suggestions before relying on them; AI can make mistakes.

We do not sell personal information or use private Instagram messages to target advertising.

Who Receives Information

Business account holders can access the records they manage. Recipients receive messages, documents and invitations you send or authorize. Website visitors can see information you publish.

Our service providers process information needed to run BrideBooked. These include Cloudflare for application hosting and storage, Neon for databases, Amazon Web Services for email delivery and related storage, Stripe for payments, and the AI providers described above. Connected platforms, including Meta and Google, receive the requests needed to provide the integrations you enable. Their own privacy policies also apply to their services.

Authorized operators may access information to provide support, investigate security problems or fulfill deletion requests. We may also disclose information when required by law or necessary to protect people and the service. Data may be processed outside your country through our providers.

Retention and Disconnecting

We keep account and business records while they are needed to provide the service or until their removal is requested and processed. Imported Instagram conversations, contacts and related business records do not have an automatic expiry when you disconnect.

Disconnecting Instagram stops the connection, removes its stored access token and removes imported portfolio photos. It does not automatically erase conversations already in the inbox, attachments, contact details, webhook records or bookings derived from messages. Request deletion if you want that information removed too. Deletion from BrideBooked does not delete messages or posts held independently by Instagram or their recipients.

Deletion requests are handled manually. Some information may need to be kept for accounting, security, dispute resolution or other legal obligations. Backups and service-provider records may remain until their applicable retention periods expire. We will explain any applicable retention limits when handling your request and keep a limited record of the request and its outcome.

Your Choices and Deletion Requests

You can change account information, disconnect integrations and control your published portfolio through Settings. To request access, correction, a copy of your data or deletion, email devonddunn@gmail.com. For deletion, use the subject deletion request and identify your BrideBooked account, Instagram username if relevant, and the information you want removed. Do not send passwords or access tokens. We may verify your identity before acting.

You can also request Instagram data deletion from BrideBooked's Instagram settings or through Meta's app settings. We record those requests, notify our team by email and provide a reference and status page. A pending request is an acknowledgment, not confirmation that deletion has finished. The status changes to completed only after an operator records that the request has been handled.

If you are a customer of a business using BrideBooked, that business also decides how it uses your information. Contact the business about its records, or contact us so we can help direct your request. Depending on your location, you may have additional rights to object to or restrict processing, withdraw consent or complain to your local privacy authority. We handle requests under the applicable requirements.

Cookies, Security and Children

We use cookies and browser storage for sign-in, security and preferences. Blocking them may prevent parts of the service from working. Access controls, encrypted connections and encrypted integration tokens help protect data, but no system can guarantee absolute security.

BrideBooked is intended for business users, not for children to create their own accounts. Contact us if you believe a child has provided information that should be removed.

Policy Updates

We update this page when our data practices change and revise the date above. For questions about this policy, contact devonddunn@gmail.com.