Data processing at ContigoSí

Data controller: the service owner identified in the Legal notice, operating under the ContigoSí brand.

Contact email:

We may process the data you provide when creating your account, setting up the invitation, contacting us, or using the platform. This includes, for example:

• Identification and account access data.
• Wedding data and invitation configuration data.
• Guest data entered by the user.
• RSVP responses, companions, menus, transport, accommodation and custom answers.
• Allergies, intolerances and other details that may reveal health data, only when the data subject provides them and gives explicit consent.
• Contact data, campaign attribution and consents submitted through forms or email.
• Payment and billing data managed through Stripe.
• Basic technical data for usage, security, and diagnostics.

We process data to:

• Provide the service and keep the account operational.
• Manage payments, activations, benefit requests, and transactional communications.
• Send ContigoSí news and ideas only when this purpose has been expressly accepted.
• Address questions, incidents, and support requests.
• Improve the service, prevent abuse, and strengthen security.
• Comply with legal and tax obligations.

The main legal basis is the performance of a contract when the user creates an account, configures the invitation, or contracts the service.

Additionally, we may process certain data based on consent, compliance with legal obligations, or legitimate interest in maintaining the security and proper functioning of the platform.

Marketing communications rely on specific, optional consent that is separate from requesting a benefit or collaboration. It may be withdrawn at any time.

To provide the service, we use specialized providers that may act as data processors, including infrastructure, authentication, storage, payment, and transactional email providers.

The platform currently uses Clerk for authentication, Supabase for database and storage, Stripe for payments, Resend for transactional email, Vercel for hosting, n8n for contact automation, Talia as an optional assistant, Google Cloud for requested translations and Spotify when a user voluntarily connects an account.

We disclose only the data each provider needs and enter into the required data-processing terms.

Requesting a collaboration benefit does not mean that we automatically disclose your data to the partner. Where showing the confirmation email is sufficient, you decide whether to contact the partner and present it.

The couple or professional who creates a wedding decides which guests to add and why their responses are collected and therefore acts as controller for that processing.

ContigoSí processes guest data on their instructions as processor. ContigoSí is an independent controller for accounts, billing, security, support and its own legal obligations.

Inactive drafts are deleted after 30 days of inactivity following the scheduled notices. Published wedding data remain while the account keeps the wedding, until its owner deletes it or requests deletion.

Contact enquiries, benefit requests and campaign leads are kept for up to 12 months after closure unless needed for a contract or claim. If you accept marketing communications, we keep the necessary data until you withdraw consent. Billing and contracting evidence is blocked for the applicable tax, commercial and limitation periods.

You can request access, rectification, deletion, objection, restriction, or portability of your data by sending an email to

If you believe the processing is unlawful, you may complain to the Spanish Data Protection Agency at www.aepd.es. For guest data controlled by the couple, you may also contact them directly.

For any matter related to privacy or data protection, you can write to us at

Some providers may process data outside the European Economic Area. Where this occurs we rely on a valid adequacy decision, the EU–US Data Privacy Framework where applicable, or European Commission standard contractual clauses with any necessary supplementary safeguards.

You can request information about the safeguard used for a provider through our privacy email.

We apply access controls, encryption in transit, environment separation, backups and data-minimisation measures proportionate to risk. The service is not intended for minors to create accounts.

We will publish material changes on this page and communicate them through an appropriate channel when they materially affect ongoing processing.