Privacy Policy (Including Cookies)

Last revised: 19 January 2026

1. Who We Are

Velarion Systems OÜ ("Company", "we", "us", "our") is the data controller for personal data processed through smartweddingassistant.com (the "Platform").

We process personal data in accordance with:

• the EU General Data Protection Regulation (GDPR) (EU) 2016/679;
• applicable Estonian data protection laws;
• other applicable legal requirements.

2. What Personal Data We Collect

Depending on how you use the Platform, we may collect:

2.1 Account and Profile Data

• name (if provided);
• email address;
• login credentials (stored securely);
• account settings.

2.2 Payment and Purchase Data

• purchase amount and currency;
• transaction identifiers and payment status;
• applied coupon/discount information (if used);
• limited payment metadata (e.g., card brand, masked card details where provided by payment partners).

We do not store full payment card details. Payments are processed by third-party payment providers.

2.3 Chat and User Input Data

• messages you submit to the AI assistant;
• preferences and planning details you voluntarily share (e.g., wedding date ideas, style preferences, budget estimates).

You should avoid sharing sensitive personal data unless necessary.

2.4 Technical and Usage Data

• IP address;
• browser type and device information;
• logs, timestamps, and session data;
• interactions with Platform pages/features.

3. Why We Process Personal Data (Legal Bases)

We process personal data for the following purposes:

3.1 Contract Performance (Article 6(1)(b) GDPR)

• create and manage your account;
• provide the AI chat service;
• track credit balance and usage;
• process purchases and deliver credits.

3.2 Legal Obligations (Article 6(1)(c) GDPR)

• accounting and tax compliance;
• issuing payment confirmations, receipts, and invoices (where applicable);
• responding to lawful requests from authorities.

3.3 Legitimate Interests (Article 6(1)(f) GDPR)

• prevent fraud, abuse, and security incidents;
• maintain platform integrity and performance;
• improve features and user experience;
• handle disputes, support requests, and enforcement.

3.4 Consent (Article 6(1)(a) GDPR), where applicable

• optional analytics or marketing cookies;
• marketing communications (if enabled).

You may withdraw consent at any time.

4. Sharing Personal Data

We may share personal data only where necessary, including:

• payment providers (to process payments and confirmations);
• hosting and infrastructure providers (to operate the Platform);
• analytics or performance tools (only where enabled and lawful);
• authorities where required by law;
• professional advisers (legal/accounting) where necessary.

We do not sell personal data.

5. International Transfers

We may use service providers that process data outside the EU/EEA.

Where international transfers occur, we apply appropriate safeguards (such as Standard Contractual Clauses) as required by GDPR.

6. Data Security

We use reasonable technical and organisational measures designed to protect personal data, including:

• access controls;
• encrypted connections (TLS);
• monitoring and security practices.

No system is fully secure, but we take appropriate steps to reduce risk.

7. Data Retention

We retain personal data only for as long as needed, including:

• account data while your account is active;
• transaction data as required for legal and accounting purposes;
• support and communication data as needed to resolve issues and enforce Terms.

When retention is no longer required, data is deleted or anonymised.

8. Your Rights

Depending on your location, you may have rights to:

• access your data;
• correct inaccurate data;
• request deletion (where legally permitted);
• restrict or object to processing;
• request data portability;
• withdraw consent (where processing is based on consent).

To exercise your rights, contact: contact@smartweddingassistant.com

9. Cookies (Short Notice)

The Platform uses cookies and similar technologies to:

• enable essential site functionality (login, sessions, security);
• remember preferences;
• analyse performance and improve user experience (where enabled);
• support fraud prevention and abuse detection.

Essential cookies are used without consent where permitted by law.

Non-essential cookies (such as analytics/marketing cookies) are used only where required and after consent.

You can manage cookies through your browser settings.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on the Platform with a revised date.

11. Contact

Velarion Systems OÜ
Vesivärava tn 50–301, Kesklinna linnaosa, Tallinn, Harju maakond, 10152, Estonia
Email: contact@smartweddingassistant.com