Privacy
Privacy policy
What we collect, why, where it lives, how long it stays, and how to have it erased.
Notice version: July 27, 2026
These pages have not yet been reviewed by a lawyer.
Who is responsible for what
There are two different situations, and the difference changes who you can hold to what, so it comes first.
If you have an organizer account, Groupe Bien-aimé is the enterprise responsible for your information. We decide why it is collected, and we are who you write to.
If you received an invitation, the event’s organizer is the one who entered your name and address. They decide on their invitation, their list and their reminders. We supply the tool and host the data on their behalf. You can write to us and we will pass your request along, but the decision is theirs. We can always delete the information on our side, which is explained below.
What we collect and why
Every piece of information in the product belongs to exactly one purpose, and nothing is collected for a purpose missing from this table. The table is generated from the product’s code rather than retyped, so it cannot drift from what the software actually does.
| What it is for | Consent | Sensitive | Retention |
|---|---|---|---|
| Inviting you to this event and giving you its details | Implied | No | 90 days after the event |
| Recording your reply and passing it to the organizer | Implied | No | 90 days after the event |
| Sending you reminders about this event | Express | No | 90 days after the event |
| Passing your meal choice to the caterer | Express | No | 30 days after the event |
| Accounting for your allergies and dietary restrictions | Express | Yes | 30 days after the event |
| Arranging what you need in order to attend | Express | Yes | 30 days after the event |
| Running your organizer account | Implied | No | As long as the account or the law requires |
| Keeping the accounting records the law requires | Implied | No | As long as the account or the law requires |
Implied consent means the processing is what you plainly came to do: somebody opening an invitation to reply expects their reply to be recorded. Express consent means a separate, deliberate action with nothing pre-ticked. Health information always requires express consent.
What we do not do
- No advertising cookies, no tracking pixels, no third-party analytics. The only cookie this site sets is the one that keeps you signed in, it is called pe_session, and no script can read it.
- No selling, renting or trading personal information. Not ever, at any price.
- No guest list used for anything other than the event it was built for.
- No personal information in our technical logs. A log is for fixing a bug, not for keeping somebody’s name.
Where the data lives
The product’s database is in Montréal, in the northamerica-northeast1 region. Your guests' data is hosted there and that location is permanent.
We cannot write that everything stays in Canada, so we do not write it. Organizer accounts, meaning an email address and a hashed password, are kept in the United States by Firebase Authentication, which offers no region control. Application hosting is American too. No guest data sits in either system, but a transfer is still a transfer.
| Supplier | What it receives | Hosting | Assessment |
|---|---|---|---|
| Google Cloud FirestoreBase de données principale | Everything the service holds: accounts, events, guests, replies. | Canada | Outstanding |
| Google Cloud StorageFichiers téléversés | Images uploaded for an event page. | Canada | Outstanding |
| Firebase AuthenticationComptes organisateurs | Organizer email and hashed password. No guest data. | United States | Outstanding |
| VercelHébergement de l'application | Data in transit and request logs, which can contain an IP address. | United States | Outstanding |
| StripePaiement des événements | United States | Outstanding | |
| ResendEnvoi des courriels transactionnels | The first name and email address of people who write to the service, and those of guests the organizer chooses to email the invitation or the save-the-date to from the product. An organizer who prefers to copy the link and send it themselves passes no address through it. | United States | Outstanding |
Loi 25 requires a privacy impact assessment before personal information leaves Québec. None of these assessments is on file today. That is written here rather than left out.
How long we keep it
Retention is not a policy in a document. It is a date written on every record and a job that reads that date. An event’s guest list is erased 90 days after the event date. Allergies, accessibility needs and meal choices go earlier, 30 days after, because nobody needs them once the event is over.
The organizer sees that date when they create the event. An organizer account lives as long as the account does and goes when you close it.
Your rights
Québec law gives you specific rights over your information. You do not have to justify using them.
- Know what we hold about you and get a copy of it.
- Have inaccurate, incomplete or ambiguous information corrected.
- Withdraw your consent, reminders included, at no cost to you.
- Ask that information no longer needed for the purpose it was collected for be deleted.
- Receive your information in a structured, commonly used technological format so you can take it elsewhere.
- Complain to the Commission d’accès à l’information du Québec if our answer does not satisfy you.
We answer within 30 days of the request, as the law requires. Write to john@planmariage.ca. If you have an organizer account, deletion does not have to go through us: the Account page erases the account, its events and everything attached to them, immediately.
If something goes wrong
If a confidentiality incident presents a risk of serious injury, we notify the people concerned and the Commission d’accès à l’information promptly. Every incident is entered in a register whether or not it was reportable, because an incident nobody wrote down is an incident that happens again.
If this policy changes
A substantive change is announced by email to organizers before it takes effect. The notice version appears at the top of this page and changes whenever any purpose above changes, so a consent given yesterday still points at what was written yesterday.
Contact
PlanÉvénement is operated by Groupe Bien-aimé, the same enterprise as PlanMariage.ca. For any privacy question, write to the person in charge of the protection of personal information at john@planmariage.ca.