Privacy Policy

Zabotique is operated by Ziad Abdelsalam (sole proprietor, Egypt). We are the data controller for the personal information described below.

• Account email — used to send you a passwordless sign-in link and to receive your invitation editor.
• Invitation content — names, event date, venue name and address, optional story text, optional music URL, and up to six photos that you upload.
• Custom commission inquiries — name, email, optional WhatsApp number, event date, budget range, and the message you send via the inquiry form.
• Technical data — IP address, browser type, and basic page-view information used to operate and secure the Service.

We do not receive your card or banking details. Payment data is collected directly by Lemon Squeezy (our payment processor) and never touches our servers.

• To deliver your hosted invitation at a unique public URL.
• To send you the magic link that lets you edit your invitation.
• To respond to commission inquiries and support requests.
• To keep the Service secure and detect abuse.
• To comply with applicable legal obligations.

We do not sell your personal information, and we do not use it for advertising.

Personal data is stored with the following processors:

• Supabase — database and file storage (EU region by default).
• Vercel — hosting and CDN for the website.
• Resend — transactional email delivery.
• Lemon Squeezy — payment processing (Merchant of Record). They retain billing information and receipts.

Each processor is bound by their own privacy commitments and standard contractual clauses where applicable.

• Published invitations remain visible at their public URL until 30 days after the event date, after which they are gracefully archived (hidden from the public).
• Invitation data (form fields, photos) is kept in your account so you can re-edit or download until you ask us to delete it.
• Commission inquiries are kept for up to two years for our records.
• Account emails and login records are kept while your account is active.

We use a small number of cookies that are strictly necessary to operate the Service — primarily the Supabase authentication session cookies that keep you signed in to your editor. We do not use third-party advertising or analytics cookies.

Depending on where you live (EU/UK, California, and elsewhere), you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• export your data in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing relies on it.

To exercise any of these rights, email hello@zabotique.com and we will respond within 30 days.

The Service is intended for adults planning a wedding or engagement and is not directed at children under 16. We do not knowingly collect personal data from children.

We operate from Egypt and use processors that may store data in the EU, the United States, and elsewhere. Where personal data is transferred outside its country of origin, we rely on standard contractual clauses and other lawful transfer mechanisms.

We may update this policy from time to time. Material changes will be communicated to active customers by email. The “Last updated” date at the top reflects the latest revision.

Privacy questions and data requests: hello@zabotique.com.