Privacy Notice

This Privacy Notice explains how Gallo Event Group LLC ("we", "us") collects, uses, and protects your personal information when you use The Altar.

1. Who we are

Gallo Event Group LLC is the data controller for personal information processed through the Service. Contact us at info@jointhealtar.com.

2. Minimal data collection

We collect only the data necessary to operate the platform. This includes:

• Account data: name, email, password (hashed), user type (couple or vendor)
• Wedding data: event details, partner names, venue, guest lists, itineraries, song requests, vendor selections, room layouts
• Messaging: content of messages exchanged with vendors or partners
• Pearl AI conversations: messages you exchange with our AI assistant
• Payment data: processed entirely by Paddle (our Merchant of Record). We receive transaction confirmations but do not see or store full card details.
• Usage & device data: IP address, browser, device identifiers, log files
• Support communications: messages you send us

3. We do not sell your data

We do not sell user data to third parties. We only share data with the service providers necessary to operate the platform.

4. How we use it

• To create and manage your account
• To provide and improve the Service (planning tools, vendor matching, Pearl AI)
• To process payments and prevent fraud
• To send service notifications (booking requests, messages, plan updates)
• To provide customer support
• To comply with legal obligations

5. Legal basis

We process your data on the basis of contract performance, legitimate interests (security, fraud prevention, improvement), consent (where required), and legal obligation.

6. Who we share data with

• Paddle — our Merchant of Record, for payment processing, subscription management, tax compliance, and invoicing
• Service providers — hosting, database, analytics, customer support tools acting under our instructions
• AI providers — to power Pearl AI assistant features
• Other users — vendors you connect with see the wedding details you share with them; couples see the vendor profiles they engage with
• Authorities — where required by law

7. Data deletion & retention

Users can request deletion of their data at any time by emailing info@jointhealtar.com. We keep your account and wedding data for as long as your account is active, plus a reasonable period to comply with legal obligations and resolve disputes.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security review.

9. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent. To exercise these rights, contact info@jointhealtar.com.

10. International transfers

Your data may be processed in countries outside your own. Where required, we use standard contractual clauses or other approved safeguards.

11. Cookies

We use essential cookies for sign-in and session management. We do not use third-party advertising cookies. You can manage cookies in your browser settings.

12. Changes

We may update this Notice. The "last updated" date will reflect any changes. Material changes will be notified by email or in-app.