Privacy Policy

1. Controller and processor

FRAIM ApS, CVR no. 46713893, Vestbanevej 10, 2. tv, 2500 Valby, Denmark, is the controller for accounts, payments, support, security, our own usage statistics about signed-in members, the beta waiting list and the vendor directory. Contact: hej@fraim.dk. For the content of a wedding workspace, including guests, replies, dietary notes, seating and photos, the couple decides what is entered, who it is shared with and when it is deleted. We process that content on the couple’s behalf, as their processor, under the Data Processing terms, and use it for nothing of our own. Data-protection law does not apply to the couple’s own processing of personal data in the course of purely personal or household activities. FRAIM’s processing of personal data remains subject to that law. We apply the Data Processing terms and the protections in this policy even when the couple’s own processing is exempt. Guests can contact the couple or us about their details. We pass requests about wedding content to the couple and help them answer.

2. What we collect

• Account data: name, email, password hash, and workspace membership.
• Planning data: the content you add: guests and their RSVP/dietary details, budgets, vendors and their contact persons, seating, schedules, tasks, wish lists, notes, attachments and designs, and the emails and messages you send to guests and vendors through the Service.
• Guest data: information you and your guests enter via RSVP links and the shared photo album, including which wishes a guest has reserved.
• Payment data: Stripe handles card details. We keep the customer, payment and event references needed to recognise purchases and refunds, together with the workspace’s access rights; we do not store card numbers.
• Technical and support data: login sessions, security and error records, device/browser information needed for support, and feedback you choose to send, including any attached screenshots. The usage-statistics section below explains what is recorded separately from authentication and security logs.

The couple may have entered your name and contact details before you receive the invitation. Information may also come from you or from someone authorised to reply on your behalf. The couple chooses which invitations and reminders are sent through Just Say Yes, or shares your personal link themselves. The link connects your reply to your guest record. Emails from Just Say Yes explain that they are sent on the couple’s behalf and link to this section. We do not use your guest information to send you advertising.

Adding dietary notes and using the camera are optional. You can reply to the invitation without providing dietary information.

You can remove your name, contact details and notes from your guest record through your guest page while the link works. The couple’s planning information, such as your reply and seat assignment, is retained. Photos you have taken also remain in the album. When you remove your details, your guest and camera links are revoked. If the link does not work, or you need help with your information or photos, you can contact the couple or email hej@fraim.dk.

3. Why we use it & lawful basis

• Your account and purchases. We use your information to set up and run your account and keep track of your purchases and access to features. This processing is necessary to provide what we have agreed with you (GDPR Article 6(1)(b)). Our agreement with you is not, by itself, a legal basis for processing your guests’ information; we handle that as described above.
• For guest data in a wedding workspace, the couple decides the purpose: planning their wedding and inviting their guests. We process it only to provide the functions the couple uses (invitations, replies, the guest page, seating and the disposable cameras), as their processor. We do not use guest data for our own statistics, product analysis, marketing or AI training. Sensitive dietary information has a separate consent condition below.
• Security and improvements. We use security information, error logs, feedback and usage statistics about signed-in users to protect the service, prevent misuse, find errors and improve features. The legal basis is our legitimate interest in running a secure, well-functioning service (GDPR Article 6(1)(f)).
• Messages and support. We send messages needed for your account and use of the service, and respond when you contact us for help. The legal basis is our agreement with you or our legitimate interest in helping resolve problems, depending on the enquiry (GDPR Article 6(1)(b) or (f)). We send invitations and reminders to guests on the couple’s behalf when the couple asks us to. We do not send advertising to guests.
• AI. Just Say Yes includes a built-in wedding planner, Lucia AI, and AI features that help with specific tasks. Using Lucia AI is optional and based on your personal consent, which you can withdraw in settings (GDPR Article 6(1)(a)). Your choice does not, by itself, authorise us to process other people’s information. Section 5 describes the AI features and how information is processed.
• Legal requirements. We also process information when required by law, for example when we must retain accounting records of a purchase (GDPR Article 6(1)(c)).

4. Who receives data

We do not sell personal information. The couple and the people they invite into their wedding workspace can access information according to their permissions. To run Just Say Yes, FRAIM uses the companies listed below. This list covers our technical services and payment solution, not the suppliers the couple chooses for the wedding. These companies process information on our behalf when providing a service to us. They may also have independent responsibility for specific information, for example when the law requires them to retain payment information.

• Stripe: payment processing.
• Resend: sending service emails, such as account messages, invitations and reminders.
• Hetzner: hosting of the Service, and object storage for photos and attachments. Both in Finland (EU).
• Google (Gemini): processing information for AI features. Google receives information from your conversations with Lucia AI to generate responses. When you ask to import supplier information from a link or improve the wording of a supplier message, Google processes the page text or your draft message, respectively. Section 5 describes what information is sent.
• TypeSafe (Jev): suggestions for where Quick add text belongs, in weddings with the Wedding Pass. Guests’ and suppliers’ names are replaced before the text is sent. Section 5 describes what is sent.
• OpenRouter: access to AI models for the AI features in section 5. Requests are sent only through OpenRouter’s European routing, so they are processed in the EU/EEA.
• Apple Push Notification service: delivering push notifications in our iPhone apps where the feature is available. Apple processes a technical identifier for the recipient’s device and the notification content. This may include, for example, waiting-list names or a short feedback excerpt sent to an administrator.
• GitHub: managing bugs and improvement suggestions in our private issue tracker. When we create an issue from your feedback, it may include the text of your message.

See the Data Processing page for the processor terms.

5. AI

Lucia AI is the built-in wedding planner in Just Say Yes. The feature supports text and voice conversations and is based on Google’s Gemini model. Lucia AI is off by default. Each user chooses whether to activate the feature and can withdraw consent in settings (GDPR Article 6(1)(a)). When you use Lucia AI, what you say or type, the page you are on and your first name are sent to Google to generate a response. Responses are AI-generated and the voice is synthetic audio.

JSY does not keep a server-side conversation history for Lucia AI. Conversation state is held for the session on your device. This is separate from Google’s processing: its service terms allow limited prompt and response logging for safety, abuse prevention and legal obligations, so we do not promise zero retention by Google. We exclude guest email addresses, phone numbers and dietary notes from the structured guest context sent to the model. Text you type yourself can still contain personal data; avoid including sensitive or unnecessary information about others.

Other AI features help with specific tasks. In weddings with the Wedding Pass, Quick add uses Jev from TypeSafe to suggest where the content belongs and fill in relevant fields. We replace guests’ and suppliers’ names with placeholders before the text is sent. If you add a photo or speak instead of typing, the app reads the text in the photo and turns your speech into text on your phone. Only that text is sent, as typed text would be. The photo itself is not sent to TypeSafe; it is stored with what you add. Without the Wedding Pass, Quick add uses fixed rules and does not send your input to an AI provider. When you request supplier import from a link, the page text is sent to Gemini to extract information. When you request help polishing a supplier message, your draft is sent to Gemini. We use these requests to deliver the feature you selected, relying on the service contract for your own information and, where relevant, legitimate interests for ordinary contact information about other people. Do not include allergy, health or other sensitive information. Google’s and TypeSafe’s processing terms apply to the requests sent to them.

Google’s Gemini API terms describe its data use and link to the applicable processing terms. Contact us for the safeguards relevant to your request. Switching off Lucia AI prevents new sessions with the feature; it does not reverse processing that has already occurred.

6. Dietary and allergy information

Dietary and allergy notes may contain information about your health or religion. Adding them is optional. In the reply form, you must give separate consent for us to store the notes on the couple’s behalf and share them with the couple and the people they have given access to the guest list. The purpose is to accommodate your catering needs at the wedding (GDPR Article 9(2)(a)).

You can remove your dietary notes and withdraw consent in the reply form while your link works, without changing your acceptance of the invitation. The notes are also removed if you decline through the reply form or use the feature to remove your own details. If you cannot use the form, you can contact the couple or email hej@fraim.dk.

If you reply for another adult, you may only add dietary notes and give consent with that person’s permission. Information about a child must be handled by a parent or a guardian authorised to do so. The form asks you to state the basis on which you are replying for someone else. Dietary notes that a person has written through their own link are not shown to others replying for the household.

When a dietary note is saved through the reply form, we record the time, who submitted it and whether they replied for themselves, with another adult’s permission, or as a parent or guardian. We also record the version number of the consent wording shown.

The couple should let guests provide their dietary needs through the reply form rather than enter health information or religious details in other free-text fields. Dietary notes and consent information are excluded from the structured guest information sent to AI. However, sensitive information may still appear in text a user writes to an AI feature. Please avoid including such information in AI input.

7. Beta waiting list

When you join the waiting list at justsayyes.dk/beta, we use your information to keep you informed about the beta and potentially invite you to participate. Joining the waiting list does not guarantee an invitation.

• Data: email address, your names, wedding date (if you have one), language, where you heard about us, campaign and referral-source information in the signup link, and when you consented, confirmed, were invited and created an account.
• Consent. We process the information on the basis of consent (GDPR Article 6(1)(a)). You give consent in the signup form and confirm your signup through the link in our email.
• Retention: a sign-up that is never confirmed is deleted automatically after 30 days. Confirmed sign-ups are deleted no later than 6 months after the beta ends, or earlier if you ask. If you create an account, the rest of this policy applies to the account.
• Withdraw consent. You can email hej@fraim.dk at any time to withdraw consent and have your signup removed from the waiting list. This does not affect the lawfulness of processing that has already taken place on the basis of consent. If you have created an account, removing your signup from the waiting list does not delete that account.

Usage statistics, error log and feedback

Usage statistics. We record which pages and screens you open in Just Say Yes and estimate how long the app is open. On the web, time in a background tab may also count. The statistics are linked to your account and wedding workspace. We also record the type of device and whether you use the web app or iPhone app. Guest pages and camera pages are not included in these statistics.

The information is recorded on our server from requests the app already sends to function. We do not store or read information on your device solely for statistics. We use no external analytics tools or advertising identifiers. We do not store IP addresses or the content of what you write in usage statistics.

We use the statistics to understand which features are used and where users encounter problems so that we can improve Just Say Yes. The legal basis is our legitimate interest in improving the service (GDPR Article 6(1)(f)). You can object to this processing by emailing hej@fraim.dk.

• Error logs. We record technical errors to find and fix problems in the service. We filter information such as email addresses and phone numbers from error messages to limit personal information in the logs. Error records are deleted 90 days after the error was last recorded.

Feedback. When you send feedback, we use your message, our conversation and any screenshots to investigate the problem and respond to you. We also record technical information about the page or screen, the element you point out, your device, browser or app, and your language. The enquiry is linked to your account and wedding workspace. You may receive email notifications about new replies.

Only include the information and screenshots needed to explain the problem. We use the notification and issue-tracking services described in section 4. The deletion periods for conversations and screenshots are set out in section 9.

8. International transfers

Hosting of Just Say Yes and storage of photos and attachments take place at Hetzner in Finland (EU). Resend, Google, Stripe and GitHub may process data in the USA and are certified under the EU–US Data Privacy Framework, which the European Commission has found provides an adequate level of protection. Apple, TypeSafe and OpenRouter may also process data outside the EU/EEA. For TypeSafe and OpenRouter, the transfer relies on the European Commission’s standard contractual clauses.

Transfers outside the EU/EEA must have a valid legal transfer mechanism. This may be an adequacy decision by the European Commission or the European Commission’s Standard Contractual Clauses together with the necessary safeguards. For companies in the United States, the EU–US Data Privacy Framework can only be used if the specific recipient has a valid certification covering the processing.

Email hej@fraim.dk if you would like information about where your information is processed, the transfer mechanism used, or a copy of the relevant safeguards.

9. Retention

We keep the content of your wedding workspace while it is active, unless you delete it earlier or one of the periods below applies.

The photo album normally remains accessible for 60 days, counted from the day after the wedding. Photos that arrive before the wedding are also kept until then. If the wedding has no date, the 60 days count from the first photo. When access expires, the album locks and the photos are deleted after a further 10 days. The option to purchase extended storage depends on whether we offer it at that time.

You can delete individual guests from the guest list. The wedding workspace owner can also delete all guests or all photos through settings. A hidden photo is deleted after 30 days unless it is restored before then.

• Usage statistics: Information identifying the user or browser tab is removed after 395 days. The statistics remain linked to the wedding workspace and are deleted after 760 days.
• Activity history: Deleted after 730 days.
• Expired login sessions and guest links: Normally deleted 30 days after expiry. Camera links needed for photos we still retain may be kept longer.
• Abandoned signup drafts: Deleted after 90 days without changes if signup is incomplete and the user has no wedding workspace.
• Server errors: Deleted 90 days after the error was last recorded.
• Closed feedback conversations: The conversation, replies and screenshots are deleted 730 days after the most recent message.

Deletion takes place during the next successful scheduled cleanup after the deadline. The waiting list follows the periods in section 7. Information we are legally required to retain may be kept longer, for example accounting records of purchases.

Information deleted from the service may still remain in backups until those backups expire or are deleted. Only authorised people can access these copies, which are used for security and recovery.

If we restore a backup, previously completed deletions must be carried out again before the information is put back into ordinary use. You can write to hej@fraim.dk for information about how the relevant backups are retained.

10. Your rights

Under the GDPR, you have a number of rights:

• You can access the personal information processed about you and have incorrect information corrected.
• In certain circumstances, you can have information deleted or limit how it is used.
• You can object to processing based on a legitimate interest.
• When the conditions for data portability are met, you can receive information you have provided in a commonly used, machine-readable format and have it transferred to another provider where technically possible.
• If processing is based on your consent, you can withdraw that consent at any time.
• You can complain to the Danish Data Protection Agency (Datatilsynet).

Write to hej@fraim.dk to exercise your rights. We respond as soon as possible and no later than one month after receiving your request. Where necessary because your request is complex or we have received many requests, this period may be extended by up to two further months. We will tell you within the first month if the period is extended and why.

If we have reasonable doubts about your identity, we may ask for the additional information needed to confirm it. Withdrawing consent does not change the lawfulness of earlier processing based on that consent.

If your request concerns information in a couple’s wedding space, you can also contact the couple. If you write to us, we help forward your request to the appropriate recipient where necessary.

11. Cookies

See the Cookie Policy for sign-in cookies, preferences, browser storage and optional embedded content. We do not use advertising cookies or third-party analytics.

12. Children

You must be at least 18 to create a JustSayYes account. Lucia AI, the built-in wedding planner, is intended for adult account holders.

Children may appear in guest lists and wedding photos. Only add information about children that is necessary for planning the wedding. When the couple or someone else provides dietary or allergy information on behalf of a child, they must be authorised to act on that child’s behalf. A child’s ability to give consent themselves depends on their age and whether they understand what they are consenting to.

Contact us at hej@fraim.dk if information about a child needs to be corrected or deleted. We help forward the request to the couple where necessary.

13. Changes

We will post any updates here with a new "last updated" date and notify you of material changes.