Privacy policy

Linenfold ("Linenfold", "we", "us") is a wedding planning service at linenfold.co operated by [Contextual Labs Ltd. — confirm legal entity], [address], Alberta, Canada. This policy explains what personal information we collect, why, how we protect it and the choices you have. Questions: privacy@linenfold.co.

1. The short version

• We collect what we need to run your wedding workspace, and nothing to sell. We don't sell or rent personal information, and we don't share it for advertising.
• We don't run a vendor marketplace and never pass your details to vendors unless you share something with them yourself.
• You can export or delete your data at any time.
• We use privacy-friendly analytics: our own, plus Cloudflare Web Analytics on our public website. No cookies, no ad pixels, no session replay, and no tracking across sites.

2. Who this policy covers

• Account holders: couples and anyone they invite to a workspace (partners, planners, family).
• Guests: people whose details a couple adds to their guest list or who submit the guest address form.
• Vendors: people a couple adds as vendors or shares a vendor page with.
• Visitors to our website and free tools.

3. Information we collect

• Account information: name, email address, login method (email link or Google), and the partner labels and settings you choose.
• Wedding workspace content you enter: for example your wedding date, budget and payments you log, vendors and their contact details, guest names and contact details, RSVP status, dietary needs, table assignments, timelines, notes, files and images you upload.
• Guest address form submissions: the name, household size, mailing address, email, phone, dietary needs and note a guest chooses to submit to a couple.
• Purchase information: our reseller Paddle (see section 6) processes payments. We receive confirmation of your purchase, the plan, country and amount — not your full card details.
• Usage and device information: features used (for example opening checkout or seeing an upgrade prompt), recorded in our own database as the event and the page it happened on, without cookies, IP addresses or anything that links it to you; on our public website and free tools (not inside your workspace or on share pages), page views and page-load speed counted by Cloudflare Web Analytics, which sets no cookies and doesn't fingerprint or track you across sites; and standard server logs (IP address, browser, timestamps) kept by our hosting provider for security.
• Communications: emails you send us and support conversations.

We don't intentionally collect sensitive information. Some details you enter (for example dietary requirements or accessibility notes about guests) may reveal health or religious information; you choose whether to enter them, and they're used only to display in your workspace.

4. How we use information

• To provide the service: create and sync your workspace, compute budgets and summaries, generate PDFs, send emails you request (such as partner invites and magic links), and show share pages you create.
• To process purchases, refunds and plan access.
• To keep the service secure, prevent abuse (for example rate-limiting public forms) and fix bugs.
• To improve the product using aggregated, de-identified usage statistics.
• To send service messages (security, billing, important changes) and, only if you opt in, planning tips and product news. Every marketing email has an unsubscribe link.
• To comply with legal obligations.

We do not use your workspace content or guests' information to train third-party AI models, and we do not sell, rent or trade personal information.

5. Guests' information

When a couple adds guests or shares the address form, the couple decides what to collect and why; we store and process that information on the couple's behalf to provide the service. If you're a guest and want your details corrected or removed, contact the couple, or email privacy@linenfold.co and we'll help. Guest form submissions are visible only to members of that couple's workspace.

If you send your details through a couple's address form, we keep what you typed encrypted and show it only to that couple, who check it before it goes in their guest list. To stop abuse we keep a one-way, keyed hash of your IP address, never the address itself, and count how often a form is sent from it. The form page isn't indexed by search engines and sets no cookies. Responses the couple rejects are deleted after 30 days.

6. Service providers we use

We share information only with providers who help us run Linenfold, under contracts that limit their use to providing services to us:

• Supabase (database, authentication) — [region]
• Cloudflare (website and application hosting, content delivery, storage of the images and documents you upload, server logs, and cookieless Web Analytics on our public website) — global
• Resend (transactional email) — United States
• Paddle (payments; Paddle is our reseller and merchant of record and processes your payment under its own privacy policy) — United Kingdom / global
• [PDF rendering host, e.g. Fly.io] — [region]
• Google (only if you choose "Sign in with Google")
• Google Fonts (only on your Moodboard page, to show the fonts you type there: your browser asks Google for those font names and receives your IP address, with no referrer sent) — global

We may also disclose information if required by law, to protect the rights and safety of users or the public, or as part of a merger or acquisition (in which case this policy continues to apply to your information).

7. International transfers

We're based in Canada, and our providers may store or process information in the United States, the European Union, the United Kingdom or other countries. Information may be accessible to authorities in those countries under their laws. Where required, we use contractual safeguards (such as Standard Contractual Clauses) for transfers.

8. Sharing you control

Linenfold lets you share specific information on purpose: inviting collaborators, vendor share pages, day-of links, profile share links and the guest address form. Anyone with a share link can view what that link shows until you revoke it or it expires. Share pages are not indexed by search engines.

9. Retention

• Workspace content is kept while your account is active. After a Complete plan's access period ends, the workspace becomes read-only but stays available to export.
• If you delete your account, we delete your workspace content within 30 days, and from backups within 90 days, except where we must keep limited records (for example purchase records for tax purposes, kept for the period the law requires).
• Server logs are kept for up to 30 days. Usage events contain no personal information.
• Guest address submissions are deleted with the workspace.
• Photos and documents you remove from your workspace are deleted from storage 30 days later, so you can undo a mistake. Deleting the workspace or your account deletes them with it.

10. Security

We use encryption in transit (TLS) and at rest, encrypt guest contact details at the field level, isolate each workspace with database-level access controls, use tokenised and revocable share links, and limit staff access. No system is perfectly secure; we'll notify you and the relevant authorities of a breach as required by law.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, delete or restrict use of your personal information, to withdraw consent, and to object to certain processing. You can export or delete your data from Settings at any time, or email privacy@linenfold.co. We'll respond within 30 days. We'll never discriminate against you for exercising your rights.

• Canada: you can contact the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta.
• EU/UK: our legal bases are performance of a contract (providing the service), legitimate interests (security, product improvement), consent (marketing emails) and legal obligation. You may complain to your local data protection authority.
• California and other US states: we don't sell or share personal information for cross-context behavioural advertising, and we don't use or disclose sensitive personal information beyond what's needed to provide the service.

12. Cookies

We use only cookies that are strictly necessary to sign you in and keep the service secure. Our analytics don't use cookies. If we ever add non-essential cookies, we'll ask first.

13. Children

Linenfold is for adults. You must be at least 18 (or the age of majority where you live) to create an account. We don't knowingly collect information from children except where a couple adds a child as a guest (for example a name and attendance count), which the couple controls.

14. Changes

We'll post updates here and change the "Last updated" date. For significant changes, we'll notify account holders by email or in the app before they take effect.

15. Contact

Privacy Officer, [Contextual Labs Ltd.], [address], Alberta, Canada · privacy@linenfold.co