Privacy
Privacy policy
What we collect, why, where it lives, how long it stays, and how to have it erased.
Notice version: October 17, 2026
Who is responsible for what
There are two different situations, and the difference changes who you can hold to what, so it comes first.
If you have an organizer account, Groupe Bien-aimé is the enterprise responsible for your information. We decide why it is collected, and we are who you write to.
If you received an invitation, the event’s organizer is the one who entered your name and address. They decide on their invitation, their list and their reminders. We supply the tool and host the data on their behalf. You can write to us and we will pass your request along, but the decision is theirs. We can always delete the information on our side, which is explained below.
What we collect and why
Every piece of information in the product belongs to exactly one purpose, and nothing is collected for a purpose missing from this table. The table is generated from the product’s code rather than retyped, so it cannot drift from what the software actually does.
| What it is for | Consent | Sensitive |
|---|---|---|
| Inviting you to this event and giving you its details | Implied | No |
| Recording your reply and passing it to the organizer | Implied | No |
| Sending you reminders about this event | Express | No |
| Passing your meal choice to the caterer | Express | No |
| Accounting for your allergies and dietary restrictions | Express | Yes |
| Arranging what you need in order to attend | Express | Yes |
| Running your organizer account | Implied | No |
| Measuring which pages of the public site get read | Express | No |
| Keeping the accounting records the law requires | Implied | No |
Implied consent means the processing is what you plainly came to do: somebody opening an invitation to reply expects their reply to be recorded. Express consent means a separate, deliberate action with nothing pre-ticked. Health information always requires express consent.
What we do not do
- No advertising cookies, no tracking pixels, and no measurement without your consent. The pe_session cookie keeps you signed in and no script can read it. The pe_mesure cookie only remembers your answer about audience measurement. On the marketing pages, and only if you accept, Google Analytics sets its own cookies; the Cookies link at the bottom of every page lets you change your mind.
- No selling, renting or trading personal information. Not ever, at any price.
- No guest list used for anything other than the event it was built for.
- No personal information in our technical logs. A log is for fixing a bug, not for keeping somebody’s name.
Where the data lives
The product’s database is in Montréal, in the northamerica-northeast1 region. Your guests' data is hosted there and that location is permanent.
Some of our suppliers are American, so information may be communicated outside Québec: organizer accounts (Firebase Authentication), application hosting (Vercel), payment (Stripe) and email delivery (Resend). No guest data is kept at Firebase Authentication, Vercel or Stripe. The table shows what each one receives.
| Supplier | What it receives | Hosting |
|---|---|---|
| Google Cloud FirestoreBase de données principale | Everything the service holds: accounts, events, guests, replies. | Canada |
| Google Cloud StorageFichiers téléversés | Images uploaded for an event page and for messages to guests. | Canada |
| Firebase AuthenticationComptes organisateurs | Organizer email and hashed password. No guest data. | United States |
| VercelHébergement de l'application | Data in transit and request logs, which can contain an IP address. | United States |
| StripePaiement des événements | The name, email address and payment method of the organizer who pays for an event. No guest data. Card numbers never pass through our servers. | United States |
| Google AnalyticsMesure d'audience du site public | The pages read on this public site, the device, the browser and an approximate region, only if you accept. Never on an event page or in the organizer space. | United States |
| ResendEnvoi des courriels transactionnels | The first name and email address of people who write to the service, the address of organizers who ask for a new password, and the first name and address of guests the organizer chooses to email the invitation, the save-the-date or a follow-up to from the product, and of guests who asked for a day-before reminder. An organizer who prefers to copy the link and send it themselves passes no address through it. | United States |
How long we keep it
An event’s guest list, the replies, the allergies and the meal choices stay as long as the organizer keeps them. Nothing is erased on their behalf: it is their list and their event, so the decision is theirs.
The organizer can download their list and delete it themselves, with one button, at any time, or remove one guest at a time. Closing their account erases their events and everything attached to them immediately. If you are a guest and want your information gone, write to us: we pass the request to the organizer and can delete the information on our side.
Your rights
Québec law gives you specific rights over your information. You do not have to justify using them.
- Know what we hold about you and get a copy of it.
- Have inaccurate, incomplete or ambiguous information corrected.
- Withdraw your consent, reminders included, at no cost to you.
- Ask that information no longer needed for the purpose it was collected for be deleted.
- Receive your information in a structured, commonly used technological format so you can take it elsewhere.
- Complain to the Commission d’accès à l’information du Québec if our answer does not satisfy you.
We answer within 30 days of the request, as the law requires. Write to john@planmariage.ca. If you have an organizer account, deletion does not have to go through us: the Account page erases the account, its events and everything attached to them, immediately.
If something goes wrong
If a confidentiality incident presents a risk of serious injury, we notify the people concerned and the Commission d’accès à l’information promptly. Every incident is entered in a register whether or not it was reportable, because an incident nobody wrote down is an incident that happens again.
If this policy changes
A substantive change is announced by email to organizers before it takes effect. The notice version appears at the top of this page and changes whenever any purpose above changes, so a consent given yesterday still points at what was written yesterday.
Contact
PlanÉvénement is operated by Groupe Bien-aimé, the same enterprise as PlanMariage.ca. For any privacy question, write to the person in charge of the protection of personal information at john@planmariage.ca.