Effective October 20, 2026

Privacy notice

This notice describes the WedBrilliant service. Contact the operator at info@wedbrilliant.com or use Support inside your account.

Information we use

Public browsing does not require an account. Email accounts use Supabase authentication, which manages passwords, email verification, login sessions and password recovery. WedBrilliant receives a verified account identifier, email and supplied name. Existing ChatGPT accounts can continue to use their original sign-in. Email registration is available to vendors and couples. WedBrilliant stores your account name, preferred workspace, access status, and policy acceptance. We also store vendor portfolio photos, photo captions, vendor profiles, business websites, ZIP locations, travel limits, availability, wedding requests, budgets, proposals, private messages, support requests, and activity records you create.

ZIP codes are converted to approximate coordinates using GeoNames data. We do not request your device location. Do not put home addresses, payment-card numbers, identity documents, or other sensitive information in descriptions or messages.

Who sees what

Vendor profiles require initial owner approval before becoming public. Once approved, profile and photo updates are public immediately without another review. The owner can still suspend a listing. Private wedding drafts are visible to the account that created them. Sending a direct quote request shares its details only with the selected vendor. Publishing a general wedding request shares its details with matching approved vendors. A proposal and its message thread are available to the vendor and couple involved. The owner dashboard includes account access, profile review, request matching diagnostics, support tickets, and activity metadata; it does not provide a private-conversation reader.

Support tickets are visible to the site operator. Encrypted recovery points include conversations and other records so the operator can restore the service. A downloaded recovery file does not reveal conversation text without the server-held encryption key. These controls do not mean that hosting or database administrators can never access stored data.

Private vendor job planner

Vendors can store jobs from any source, including client names and contact details, event locations and times, services, payment amounts, notes and checklists. These records are private to the vendor account and are not shown in public profiles, matching feeds or the owner dashboard. Vendors should have permission to record client information and should not enter payment-card numbers or other sensitive credentials. Jobs are included in personal account exports and encrypted service recovery points. Archiving retains the job; use Support for a permanent deletion request. Adding or archiving a job does not change public availability. A vendor can explicitly block a job’s start date on their profile. Payment amounts are manually recorded; the planner does not collect payments or send calendar reminders.

Why we use information

We use it to provide matching, proposals, messaging, support, access controls, and recovery, and to investigate service problems or misuse. WedBrilliant does not sell personal information. Anonymous public-page counting is described below. We do not use Google Analytics or advertising trackers. It does not process payments. When configured, transactional quote alerts are sent through Resend as described below.

Service providers

WedBrilliant uses Supabase for email authentication and account emails, OpenAI/ChatGPT for existing ChatGPT sign-in and Sites hosting infrastructure, and Cloudflare-based storage and delivery, including R2 file storage for vendor photos. Authentication cookies keep you signed in; they are HttpOnly, Secure and limited to this website. Supabase holds password credentials; passwords are not saved in WedBrilliant’s application database. Authentication attempt limits retain short-lived hashed network identifiers to reduce abuse. These providers may process technical data such as IP addresses and service logs under their own policies. See OpenAI privacy information and Cloudflare privacy information. See also Supabase privacy information. Links to vendor websites take you to separately operated services.

Anonymous website traffic

We count public-page views using WedBrilliant’s own server and storage. This requires no analytics cookies, browser-storage identifiers, or consent-button click. We retain daily totals for the homepage, vendor directory, public vendor profiles, and public information pages for up to 90 days. The owner dashboard shows page totals and daily counts, not identified visitors or individual browsing histories. Repeat visits and reloads count again.

The counter does not collect account identity, email addresses, names, IP addresses, device identifiers, referrer URLs, URL queries, form fields, passwords, confirmation tokens, wedding details, proposals, messages, or support ticket content. The server receives normal technical request information to deliver the service; the counter does not retain that information. Recognizable automated user agents are excluded, and a browser’s Global Privacy Control signal disables the counter. Login, signup, password, email-confirmation, and private workspace pages are excluded. Analytics totals are retained independently of account recovery files. Older totals are removed during subsequent counting activity.

Retention and recovery

Closing a request or suspending an account does not delete its records. We retain account and service records until an operator-assisted removal or another necessary operational decision. Authentication-provider records and identity links are managed separately from application recovery points. Recovery points are manual, not scheduled; the app retains up to 20 recent points plus safety points made before restoration. Downloaded copies may be retained separately by the owner. Restoring an earlier point can reintroduce older records, so removal requests must be considered before a recovery.

Vendor photos

Photos on approved, active vendor profiles are public. Photos on profiles awaiting initial approval are available only to the vendor account and site owner for review. New photos on an approved profile become public immediately. Removing a photo hides it from the current profile immediately. Detached photo files may be retained to support recovery until operator-assisted removal. Encrypted recovery downloads include photo references and captions, but not the image files themselves. Vendors should keep their original photos.

Your choices

You can edit your profile, keep requests as drafts, close published requests, and download a personal export from Account. Use Support to request access corrections, account removal, or help with privacy. Removal requests are reviewed by the operator; they are not automatic and may require handling related records, other participants’ records, recovery copies, and applicable obligations.

The service is intended for adults 18 and older. If you believe a minor supplied information, contact us. Changes to this notice will be posted here; material changes should be reviewed before additional use.