Privacy Policy

Last updated: September 13, 2026

Altessa LLC ("we", "our", "us"), operating as Altessa, provides wedding planning software to couples preparing for their wedding day. This Privacy Policy describes how we collect, use, and share information when you use Altessa at altessa.studio (the "Service").

Information we collect

When you create an account, we collect your email address and any name you provide. When you use the Service, we store the wedding planning information you enter, including dates, venues, vendor details, guest lists, budgets, layouts, and any files you upload such as vendor contracts.

If you purchase Altessa, our payment processor Stripe collects your billing information. We never see or store your full card number.

We automatically receive limited technical information when you visit the Service, including IP address, browser type, device information, and pages visited, for security purposes. We also collect product-usage information such as the pages and features you interact with, to understand how Altessa is used and improve it; by default this is done without cookies or persistent identifiers, and session recordings and cookies are used only if you accept them (see Analytics and Cookies below).

How we use information

We use the information to operate the Service, authenticate your account, process payments, communicate with you about your account and product updates, prevent abuse, and improve Altessa.

Service providers

We share information with the following third parties strictly to operate the Service:

  • Supabase: database, authentication, and file storage
  • Vercel: web hosting
  • Stripe: payment processing
  • Sentry: error and crash reporting (always on; see Error monitoring below)
  • PostHog: product analytics (cookieless by default; cookies and session recordings only with your consent)
  • Microsoft Clarity: heatmaps and session recordings (cookieless by default; cookies only with your consent)
  • Vercel Web Analytics: cookieless page-view counts
  • Meta (Facebook) Pixel and Conversions API: measures whether our own advertising led to a signup or purchase (browser pixel sends data only with your consent; see Advertising measurement below)

These providers process information on our behalf as service providers or processors under contract, and are not permitted to use it for their own purposes. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not share your wedding planning data with advertisers or vendors.

Analytics and session recordings

We use PostHog and Microsoft Clarity to understand how people use Altessa so we can improve it. Until you make a choice in our cookie banner, these tools run in a cookieless mode: they collect product-usage events (such as which pages and features you visit), approximate location derived from your IP address, and device and browser information, but set no cookies, store no persistent identifier in your browser, and do not record your session. We rely on our legitimate interest in understanding and improving the Service for this limited, non-identifying measurement.

If you select "Accept", PostHog and Clarity may set cookies and use related browser storage so we can recognize you on a return visit, and may record masked session replays and heatmaps that show how a page was used. To protect your wedding planning information, PostHog recordings mask all text and all form inputs, so the content you type is not captured. If you select "Decline", both tools stop collecting anything further for that visit and do not load on future visits.

Advertising measurement

We run a small amount of advertising on Meta platforms (Facebook and Instagram) and use the Meta Pixel and Conversions API to learn whether those ads led to a signup or purchase. We do not use this data to show you ads elsewhere, and we do not track your activity on other websites. The browser pixel loads with consent withheld: it sends nothing and sets no cookie unless you select "Accept" in our cookie banner. Separately, when you make a purchase we may send a hashed (not readable) form of your email and the purchase event to Meta from our server so that the ad that led to it can be credited; this happens regardless of your cookie choice and is based on our legitimate interest in measuring our own advertising. Meta processes this data under its own privacy policy.

Error monitoring

We use Sentry to receive automatic reports when the Service encounters an error, so we can diagnose and fix problems. Sentry runs for error monitoring only. It does not record your session, replay your activity, or track your behavior across the Service. Because it is limited to keeping the Service working correctly, we run it on the basis of our legitimate interest in the Service's reliability and security, independent of the analytics consent described above.

Cookies and consent

We use a strictly necessary authentication cookie set by Supabase to keep you signed in. The Service cannot function without it, so it is always present. We also store small first-party values in your browser's local storage to remember your cookie choice, a referral or campaign link you arrived through, and similar functional settings; these are not used for tracking across other websites.

When you first visit Altessa, a banner lets you Accept or Decline. Before you answer, our analytics tools run cookieless as described above and the Meta Pixel sends nothing. If you accept, PostHog, Microsoft Clarity, and the Meta Pixel may set cookies and use related browser storage as described in Analytics and session recordings and Advertising measurement. We remember your choice in local storage under the key altessa_cookie_consent. Sentry and Vercel Web Analytics do not set analytics or advertising cookies.

To change your choice after answering, clear the cookies and local storage for altessa.studio in your browser (for example by clearing site data, which removes the altessa_cookie_consent key). The banner will appear again on your next visit.

Wedding websites that couples publish through Altessa (addresses beginning with altessa.studio/w/) are for their guests. We do not run analytics, session recording, advertising measurement, or a cookie banner on those pages.

Legal bases for processing (EEA and UK users)

Where the GDPR or UK GDPR applies, we process your information on the following legal bases: to perform our contract with you (operating the Service, processing payments, authentication); to comply with legal obligations; based on your consent for analytics cookies, session recordings, and browser-side advertising measurement, which you may withdraw at any time as described under Cookies and consent; and based on our legitimate interests in securing and maintaining the Service (including error monitoring), in cookieless, non-identifying usage measurement, and in measuring the results of our own advertising, where those interests are not overridden by your rights.

Data retention

We retain your information for as long as your account is active. When you delete your account, we delete your data within 30 days from our production database. Backup snapshots may persist for up to 90 additional days before being purged.

Your rights

To request access to, correction of, export of, or deletion of your data, contact us at the email address below. Account deletion is permanent and removes your wedding planning data, files, and account record.

If you are a resident of California, the EEA, or the United Kingdom, you may have additional rights under applicable law, including the right to access, the right to deletion, the right to object to or restrict processing, the right to data portability, and the right to lodge a complaint with a supervisory authority. California residents have the right to know what personal information we collect and to opt out of any sale or sharing of personal information; as stated above, we do not sell or share personal information for cross-context behavioral advertising.

Security

We use industry-standard security practices including encrypted connections (HTTPS), encrypted data at rest via Supabase, and Row-Level Security policies that restrict each user's access to their own data. No system is perfectly secure; if we become aware of a breach affecting your information we will notify you as required by law.

Children

Altessa is not intended for use by anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with information, please contact us and we will delete it.

International users

Altessa is operated from the United States. By using the Service you consent to your information being transferred to and processed in the United States.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email or by a notice in the Service before the change takes effect.

Contact

Questions about this policy can be sent to hello@altessa.studio.

See also our Terms of Service.