← Back to Nupta

Privacy Notice

Last updated: April 5, 2026

Nupta (“we,” “us,” or “our”) operates the wedding website platform at nupta.site. This Privacy Notice explains what personal information we collect, how we use it, and your rights under the Philippine Data Privacy Act of 2012 (RA 10173).

1. Data Controller

Nupta is the data controller for all personal information processed through our platform. For questions or requests, contact us at hello@nupta.site.

2. Information We Collect

From couples (account holders)

  • Account information: name, email address, and password (hashed, never stored in plaintext).
  • Wedding details: partner names, wedding date, ceremony type, venue names, love story, entourage, and other content you add to your wedding website.
  • Photos and files: images you upload for your wedding site (cover photo, gallery, etc.). We strip EXIF metadata (including GPS location) on upload.
  • Payment information: processed entirely by Stripe. We receive a confirmation of payment (amount, date, product) but never see or store your card number, CVV, or billing address.

From guests (visitors to published wedding sites)

  • RSVP responses: name, attendance status, party size, meal preference, dietary requirements, and optional message to the couple.
  • Interactive submissions: guestbook messages, song requests, poll votes, and shared photos.
  • Technical data: hashed IP address (for rate limiting and spam prevention only — we do not store plaintext IPs).

Guest list data uploaded by couples

Couples may upload their guest list (names, email addresses, phone numbers, dietary notes, groups, and seating assignments) via manual entry or CSV import. This data is provided by the couple, not collected directly from guests. Couples are responsible for ensuring they have the appropriate basis to share their guests' personal information with us for the purpose of managing RSVPs and wedding logistics.

3. How We Use Your Information

  • To provide and operate the Nupta platform (creating, editing, publishing, and hosting wedding websites)
  • To process RSVPs and manage guest lists on behalf of couples
  • To send transactional emails: account confirmations, RSVP notifications, payment receipts, and security alerts
  • To send marketing emails: onboarding tips, feedback requests, and feature announcements (you can unsubscribe anytime via the link in every email)
  • To process payments via Stripe
  • To detect and prevent spam, abuse, and unauthorized access
  • To fix bugs and improve the service (via anonymized error reports)

Legal basis: We process your data based on (a) your consent when you create an account or submit a form, (b) contractual necessity to provide the service, and (c) legitimate interest in maintaining security and improving the platform.

4. Published Wedding Websites

When you publish your wedding site, the content you've added (couple names, wedding details, photos, entourage, etc.) becomes publicly accessible at your chosen subdomain (e.g., yournames.nupta.site). Anyone with the link can view your published site.

Premium users can enable password protection to restrict access. You can unpublish your site at any time from the dashboard, which immediately removes public access.

5. Cookies & Tracking

When you first visit nupta.site, a consent banner lets you choose which cookie categories to accept. You can change your preferences anytime by clearing your browser's local storage for nupta.site.

  • Essential (always active) — Authentication session cookies set by Supabase. Required for login, account security, and basic functionality. Cannot be disabled.
  • Analytics — Vercel Analytics collects anonymous page view data using server-side measurement (no cookies). Helps us understand which pages are visited.
  • Marketing — Facebook Pixel ( _fbp cookie) measures ad performance. Only loaded if you accept marketing cookies.
  • Error tracking — Sentry captures JavaScript errors to help us fix bugs. PII (email, IP) is scrubbed before transmission. Only active if you accept error tracking.

We use Cloudflare Turnstile on public forms (RSVP, guestbook) to prevent spam. Turnstile is privacy-focused and does not use cookies or track users across sites.

6. Third-Party Services

We share data with the following service providers, solely for the purpose of operating Nupta:

  • Supabase — Database, authentication, and file storage. Data stored in Singapore (ap-southeast-1).
  • Stripe — Payment processing. Stripe is PCI DSS compliant. We do not store card details.
  • Resend — Email delivery for account notifications, RSVP alerts, and lifecycle emails.
  • Vercel — Hosting, deployment, and analytics.
  • Google Maps — Venue autocomplete and travel time calculation between ceremony and reception venues.
  • Cloudflare — DNS, Turnstile CAPTCHA for spam prevention.
  • Sentry — Error monitoring (PII scrubbed).

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

7. Data Retention

  • Free accounts: wedding sites are hosted for 6 months after the wedding date. After that, the site is archived and no longer publicly accessible.
  • Premium accounts: wedding sites are hosted for 12 months after the wedding date.
  • You will receive email reminders at 30 days and 7 days before archival.
  • You can export your guest list as CSV at any time from the dashboard.
  • Account deletion: you can request deletion from your account settings. After a 30-day grace period (during which you can cancel), all your data — account, sites, guests, RSVPs, photos, and uploads — is permanently deleted. Payment records are retained as required by law.

8. Your Rights Under RA 10173

Under the Philippine Data Privacy Act of 2012, you have the right to:

  1. Be informed about how your data is collected and used (this notice).
  2. Access your personal data. You can view and export your data from the dashboard.
  3. Correct inaccurate data. You can edit your profile, wedding details, and guest list at any time.
  4. Erase your data. You can delete your account from account settings, or email us.
  5. Object to processing. You can unsubscribe from marketing emails via the link in every email, or email us.
  6. Withdraw consent at any time by deleting your account or contacting us.

To exercise any of these rights, email hello@nupta.site. We will respond within 15 business days.

9. Complaints

If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

10. Children's Privacy

Nupta is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of significant changes via email or through the service. The “Last updated” date at the top of this page indicates when this notice was last revised.

12. Contact

For any questions about this Privacy Notice or your personal data, contact us at hello@nupta.site.