Hetzner
The servers hosting the portal and the database
Germany (EU)
Under which safeguardNo transfer outside the European Economic Area.
Our
providers.
List current as of 30 October 2026 · Applies to every The Wed Portal app
To run The Wed Portal we rely on a handful of companies: the servers, photo storage, email delivery, payments. They process the data solely on our behalf and may never use it for their own purposes.
YouTube and Vimeo are the exception: they receive data only from the browser of whoever watches one of their videos embedded in a gallery or in a quote, and they process it as independent controllers, under their own rules.
This page is what our legal documents call «the current list of providers»: the privacy policy, the notice studios hand to their own clients and the data processing agreement all point here. Anyone who wants to know where their data ends up can read it for themselves, without having to ask.
There are 10 providers. 9 of them process data outside the European Union.
Cloudflare
Storage of photos, attachments and documents; site protection and delivery; the anti-bot check on public forms
United States, with storage in Europe
Photos and documents live in European buckets; the company operating them is US-based. The anti-bot check receives your IP address when you fill in a public form.Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Resend
Sending and receiving email
United States
This is the service that delivers invitations, sign-in links and notifications to you.Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Stripe
Subscription payments and billing
United States and Ireland
This concerns whoever pays a subscription: studios and wedding planners. Couples and guests never go through it.Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Anthropic
The artificial intelligence features described in section 5
United States
Chat assistant, reply drafts, photo captions, mail labels. The data are not used to train models.Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Page fonts; sign-in with Google, if you choose it; a copy of the mail written to our own addresses
United States
The fonts load on every page, so your IP address reaches Google even if you use nothing else of theirs. The mail copy covers only email written to us (info@thewedportal.com): a studio's own correspondence never leaves towards a Gmail mailbox.Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Automattic (Gravatar)
Retrieving a profile picture from an email address, if you ask for it
United States
Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Apple, Google, Mozilla
Delivering phone notifications, if you enable them
United States
These are the three browsers' notification services: the alert passes through them, not the content of your wedding.Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Google (YouTube)
The videos a studio embeds in a gallery or in an interactive quote
United States
Two different cases. In a gallery with video your browser fetches the preview image from YouTube's servers as soon as it opens: your IP address reaches them before you even press play. In an interactive quote, instead, nothing reaches YouTube until you press play: only then does the video load from youtube-nocookie.com, which receives your IP address and your browser details. YouTube processes those data as an independent controller, under its own rules.Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Vimeo
The videos a studio embeds in a gallery or in an interactive quote, as an alternative to YouTube
United States
Your browser loads the video frame from Vimeo's servers (player.vimeo.com), which see your IP address and your browser details: in a gallery when you open the video, in an interactive quote only when you press play, and there with a do-not-track request. Vimeo processes those data as an independent controller, under its own rules.Under which safeguardStandard contractual clauses and, where applicable, the provider's adherence to recognised adequacy frameworks.
Beyond these, data may be shared with the professionals assisting us (accountant, legal adviser) and with authorities where the law requires it.
We do not sell your data to anyone, and we do not hand it to anyone who would use it for advertising.
If we change a provider, this page changes with it. For any question about your data write to privacy@thewedportal.com.