iKasal
Privacy Policy
Last updated: 1 October 2026
This policy explains what personal information iKasal collects, why we need it, who helps us handle it, and the rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). We only collect what we need to run your wedding website.
Who is responsible
- For couples' accounts: iKasal decides how this information is used and is responsible for it.
- For guests' information: the couple decides what to collect from their guests (for example, which RSVP questions to ask). We store and process that information on the couple's behalf, only to run their website.
What we collect
From couples:
- your name and email address, and your password (stored only as a secure hash, never in readable form);
- your wedding details: names, date, venues, story, photos, music and other content you add;
- your payment reference and, if you send one, a screenshot of your payment.
From guests (entered by the couple or by the guests themselves):
- names and household (who is invited together);
- RSVP answers, including meal choices and dietary notes;
- an email address, if a guest chooses to give one;
- messages and song requests left for the couple;
- photos uploaded to the couple's website;
- the time a household checks in at the venue, if the couple uses QR check-in.
Technical information:
- Cookies, only to keep you signed in and to remember that you've entered a wedding site's password. We don't use advertising or tracking cookies.
- Standard connection details, such as your IP address and browser type, which our hosting provider uses to deliver the website and protect it from attacks and abuse. We don't use them to track you or build a profile of you.
How we use it
- to create, host and show your wedding website to your guests;
- to collect and organize RSVPs for the couple;
- to send the emails the couple turns on (for example, RSVP alerts) and account emails such as sign-in and password-reset links;
- to confirm payments;
- to keep the service secure and prevent abuse;
- to answer your questions and help when something goes wrong.
Who helps us
We use a few trusted service providers to run iKasal. They handle data only to provide their service to us:
- Cloudflare — website hosting and security, and file storage (photos, music and payment screenshots) in the Asia-Pacific region.
- Supabase — database, in Tokyo, Japan (it also still holds some older uploaded files).
- Vercel — backup website hosting.
- Resend — email delivery.
This means your information may be stored or processed outside the Philippines.
We don't sell personal information, and we don't use it for advertising.
How long we keep it
- Published wedding websites are archived about 6 months (180 days) after the wedding date. At that point guest-uploaded photos are deleted. We email the couple before this happens.
- Unpaid drafts are deleted after 45 days without activity, after a warning email.
- Photos and songs a couple replaces or removes from their website are deleted automatically, about 2 days later.
- You can ask us to delete your account and website sooner.
- Our backups are kept for up to 30 days, after which deleted information is gone from them too.
How we protect it
- all connections use HTTPS;
- passwords are stored as hashes, never in readable form;
- payment screenshots are kept in private file storage that isn't publicly accessible;
- access to the data is limited to the people who run the service, and only when needed.
No system is perfectly secure, but we take reasonable care, and we'll let you know if a problem affects your information.
Your rights
Under the Data Privacy Act of 2012 you have the right to:
- be informed about how your personal information is used;
- access the information we hold about you;
- have inaccurate information corrected;
- have your information erased or blocked;
- object to how it is being processed;
- get a copy of your information in a commonly used format (data portability);
- file a complaint with the National Privacy Commission.
To make a request, email us at hello@ikasal.com. If you're a guest, you can also contact the couple directly: they can update or remove your details from their guest list.
Children
iKasal is meant for adults planning their wedding. Couples may add children to their guest list (for example, as members of a family); that information is handled the same careful way as everyone else's.
Changes to this policy
We may update this policy from time to time. If a change is important, we'll tell you by email or on this website. The date at the top shows when it last changed.
Contact
Questions or requests about your privacy? Email us at hello@ikasal.com. See also our Terms of Service.