Privacy Policy

1. Introduction

Nozari ("we," "our," or "us") operates the Nozari mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This Privacy Policy applies to all users of the Service, including couples (account administrators), wedding party members, and any other individuals who interact with our platform.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when creating an account or using the Service:

• Account Information: Name, email address, phone number (optional), profile photo (optional)
• Wedding Information: Wedding date, venue details, wedding party member names, partner names
• User Content: Photos, videos, documents, mood boards, and other content you upload
• Financial Information: Budget categories, expense amounts, vendor pricing (stored within the app; payment card details are processed by Stripe and never stored on our servers)
• Guest Information: Names, email addresses, RSVP status, dietary preferences of wedding guests you add
• Communications: Messages you send to us via email or support channels

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain information:

• Device Information: Device type, operating system, unique device identifiers, browser type
• Usage Data: Features used, time spent in app, screens viewed, actions taken
• Log Data: IP address, access times, error logs, referring URLs
• Location Data: General geographic location based on IP address (we do not collect precise GPS location)

2.3 Information from Third Parties

We may receive information from third-party services:

• Authentication Providers: If you sign in using Google or Apple, we receive your name, email, and profile photo from these services
• Payment Processor: Stripe provides us with transaction status and limited payment information (not full card numbers)

3. How We Use Your Information

We use the collected information to:

• Provide the Service: Create and manage your account, enable wedding coordination features, store and display your content
• Process Payments: Handle subscription payments and in-app purchases
• Communicate with You: Send service-related notifications, respond to support requests, provide updates about your wedding events
• Improve the Service: Analyze usage patterns, identify bugs, develop new features
• Ensure Security: Detect and prevent fraud, unauthorized access, and other illegal activities
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

4. How We Share Your Information

We share your information only in the following limited circumstances:

4.1 With Your Wedding Party

Content you share in the Service is visible to other members of your wedding space based on the visibility settings you choose. Side-specific content (e.g., "Bride's Side Only") is only visible to members of that side and the couple.

4.2 With Service Providers

We share information with third-party vendors who perform services on our behalf:

• Stripe: Payment processing
• Firebase (Google): Authentication and push notifications
• Supabase: Database and file storage
• Analytics providers: Usage analytics (anonymized)

These providers are contractually obligated to protect your information and use it only for the specific services they provide to us.

4.3 For Legal Reasons

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders)
• Government requests that meet applicable legal standards
• Protection of our rights, privacy, safety, or property
• Emergency situations involving potential harm to individuals

4.4 Business Transfers

If Nozari is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice in the app before your information becomes subject to a different privacy policy.

5. Data Retention

We retain your information as follows:

• Active Accounts: Data is retained for the duration of your subscription plus 30 days
• Expired Subscriptions: Data is preserved in read-only mode for 30 days after expiration, then permanently deleted
• Deleted Accounts: Data is permanently deleted within 30 days of account deletion request
• Backup Copies: Backups are retained for up to 90 days for disaster recovery purposes, then permanently deleted
• Legal Requirements: Some data may be retained longer if required by law (e.g., financial records for tax purposes)

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict access controls limit who can access your data within our organization
• Secure Infrastructure: We use enterprise-grade cloud infrastructure with SOC 2 compliance
• Regular Audits: We conduct regular security assessments and vulnerability testing
• Payment Security: We are PCI-DSS compliant through our use of Stripe for payment processing

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You can access your personal information through the app's Settings. You can request a copy of your data in a portable format by contacting support@nozari.app.

7.2 Correction

You can update your account information directly in the app. For other corrections, contact us at support@nozari.app.

7.3 Deletion

You can delete your account through Settings > Delete Account, or by contacting support@nozari.app. Account deletion removes all your personal data from our systems within 30 days. Note that:

• If you are an admin, this will delete the entire wedding space and affect all party members
• Content you shared may have been saved by other users
• Some information may be retained for legal or legitimate business purposes

7.4 Opt-Out of Communications

You can manage notification preferences in the app's Settings. You cannot opt out of essential service communications (e.g., security alerts, billing notifications).

7.5 Do Not Track

Our Service does not currently respond to "Do Not Track" signals. We do not track you across third-party websites.

8. Children's Privacy

The Service is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws different from your country.

When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission to protect your information.

10. Regional Privacy Rights

10.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@nozari.app or support@nozari.app.

10.2 European Economic Area Residents (GDPR)

If you are in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, and (d) our legitimate interests in operating and improving the Service.

11. Cookies and Tracking Technologies

Our web application uses cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with the Service (anonymized)

We do not use advertising cookies or third-party tracking cookies. You can control cookies through your browser settings, but disabling essential cookies may affect Service functionality.

12. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification for material changes (if you have an account)

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Privacy Inquiries: contact@nozari.app
• General Support: support@nozari.app
• Data Protection Requests: contact@nozari.app

We will respond to your request within 30 days, or sooner as required by applicable law.