The Wed Portal

Our providers.

List current as of 6 August 2026 · Applies to every The Wed Portal app

To run The Wed Portal we rely on a handful of companies: the servers, photo storage, email delivery, payments. They process the data solely on our behalf and may never use it for their own purposes.

This page is what our legal documents call «the current list of providers»: the privacy policy, the notice studios hand to their own clients and the data processing agreement all point here. Anyone who wants to know where their data ends up can read it for themselves, without having to ask.

There are 10 providers. 9 of them process data outside the European Union.

Who	What they do for us	Where they process data	Under which safeguard
Hetzner	The servers hosting the portal and the database	Germany (EU)European Union / EEA	No transfer outside the European Economic Area.
Cloudflare	Storage of photos, attachments and documents; site protection and delivery; the anti-bot check on public formsPhotos and documents live in European buckets; the company operating them is US-based. The anti-bot check receives your IP address when you fill in a public form.	United States, with storage in EuropeOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Resend	Sending and receiving emailThis is the service that delivers invitations, sign-in links and notifications to you.	United StatesOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Stripe	Subscription payments and billingThis concerns whoever pays a subscription: studios and wedding planners. Couples and guests never go through it.	United States and IrelandOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Anthropic	The artificial intelligence features described in section 5Chat assistant, reply drafts, photo captions, mail labels. The data are not used to train models.	United StatesOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Google	Page fonts; sign-in with Google, if you choose it; a copy of the mail written to our own addressesThe fonts load on every page, so your IP address reaches Google even if you use nothing else of theirs. The mail copy covers only email written to us ([email protected]): a studio's own correspondence never leaves towards a Gmail mailbox.	United StatesOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Automattic (Gravatar)	Retrieving a profile picture from an email address, if you ask for it	United StatesOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Apple, Google, Mozilla	Delivering phone notifications, if you enable themThese are the three browsers' notification services: the alert passes through them, not the content of your wedding.	United StatesOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Google (YouTube)	The videos a studio embeds in a galleryYour browser fetches the video and its preview image from YouTube's servers: your IP address reaches them as soon as the gallery opens, before you even press play. In galleries without video it does not happen.	United StatesOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Vimeo	The videos a studio embeds in a gallery, as an alternative to YouTubeSame as above: your browser loads the video frame from Vimeo's servers, which see your IP address.	United StatesOutside the Union	Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.

HetznerEuropean Union / EEA
The servers hosting the portal and the database
Where they process data
Germany (EU)
Under which safeguard
No transfer outside the European Economic Area.
CloudflareOutside the Union
Storage of photos, attachments and documents; site protection and delivery; the anti-bot check on public formsPhotos and documents live in European buckets; the company operating them is US-based. The anti-bot check receives your IP address when you fill in a public form.
Where they process data
United States, with storage in Europe
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
ResendOutside the Union
Sending and receiving emailThis is the service that delivers invitations, sign-in links and notifications to you.
Where they process data
United States
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
StripeOutside the Union
Subscription payments and billingThis concerns whoever pays a subscription: studios and wedding planners. Couples and guests never go through it.
Where they process data
United States and Ireland
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
AnthropicOutside the Union
The artificial intelligence features described in section 5Chat assistant, reply drafts, photo captions, mail labels. The data are not used to train models.
Where they process data
United States
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
GoogleOutside the Union
Page fonts; sign-in with Google, if you choose it; a copy of the mail written to our own addressesThe fonts load on every page, so your IP address reaches Google even if you use nothing else of theirs. The mail copy covers only email written to us ([email protected]): a studio's own correspondence never leaves towards a Gmail mailbox.
Where they process data
United States
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Automattic (Gravatar)Outside the Union
Retrieving a profile picture from an email address, if you ask for it
Where they process data
United States
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Apple, Google, MozillaOutside the Union
Delivering phone notifications, if you enable themThese are the three browsers' notification services: the alert passes through them, not the content of your wedding.
Where they process data
United States
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Google (YouTube)Outside the Union
The videos a studio embeds in a galleryYour browser fetches the video and its preview image from YouTube's servers: your IP address reaches them as soon as the gallery opens, before you even press play. In galleries without video it does not happen.
Where they process data
United States
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
VimeoOutside the Union
The videos a studio embeds in a gallery, as an alternative to YouTubeSame as above: your browser loads the video frame from Vimeo's servers, which see your IP address.
Where they process data
United States
Under which safeguard
Standard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.

Beyond these, data may be shared with the professionals assisting us (accountant, legal adviser) and with authorities where the law requires it.

We do not sell your data to anyone, and we do not hand it to anyone who would use it for advertising.

If we change a provider, this page changes with it. For any question about your data write to [email protected].