Privacy Policy

Information you provide when you create an account. When you sign up, we collect your name, email address, and password (which we store only in a securely hashed form — see Security below). If you choose to sign in with Google, we receive basic profile information from Google to create your account. At signup you may also choose — entirely optionally — to receive marketing emails; this is off by default and you can opt out at any time.

Information you enter using the planning tools. As you use the Service, you may enter:

• Style quiz results — we keep only general style and preference categories, not your individual selections; quiz answers in progress stay in your browser until you save them.
• Budget information — the figures and categories you enter to plan your budget.
• Guest list information — names and, where you choose to add them, contact details, meal or dietary notes, and mailing addresses for the people you invite (see Section 2 below).
• Seating arrangements, vendor notes, timeline, and checklist items — the planning details you enter.
• Inspiration images you upload — You may upload your own inspiration images and “pin” them beside elements of your lookbook. These images are processed to remove embedded location/EXIF data before storage, are stored privately to your account, and you may add an optional short caption to each. You choose whether to include them in a shareable link or PDF export (see Sections 4A and 5).

Information related to the marketplace. If you choose to sell, we collect the listing details and photos you provide. To pay you, we use Stripe, our payment processor: you will set up a Stripe account, and Stripe collects the identity, tax, and bank information needed to verify you and send your payouts. We do not store your bank account numbers, full tax identification numbers, or government-ID details ourselves — Stripe handles that information directly as our payment processor, and we receive only your verification status and the information we need to operate the marketplace. If you join a waitlist to be notified when the marketplace opens, we collect the email address (and optional name/note) you provide for that purpose only. If your sales activity on the marketplace exceeds certain volume thresholds, federal law (the INFORM Consumers Act, 15 U.S.C. § 45f) may require us to collect and verify additional identity and contact information from you and, in some circumstances, disclose certain seller information to buyers; we will notify you before that requirement applies to you.

Information collected automatically. We keep the Service deliberately lightweight and privacy-respecting. We use Vercel's cookieless, privacy-preserving page analytics to understand overall usage — it counts page views, not people: it does not use cookies, does not track you across other websites, and does not collect personal information. Aside from this, we do not use advertising trackers or other third-party analytics, and we use only the essential cookies needed to keep you signed in securely.

Some planning tools — especially the guest list — let you enter information about other people, such as your guests' names, contact details, meal or dietary preferences, and mailing addresses. You enter this information to plan your own event.

Because this information is about people who are not our users, please only enter what you need for planning, and only if you have permission to provide it. We store it securely, keep it accessible only to your account, include it if you export your data, and delete it completely when you delete your account or the related guest entries. We use it solely to provide the planning tools to you — we do not use it for our own marketing or share it for advertising.

We use the information we collect to: provide and operate the planning tools and your account; save and display the plans, lists, images, and preferences you create; secure your account and the Service; understand overall usage through privacy-preserving analytics; communicate with you about your account or the Service; send marketing emails only if you opted in (you can opt out anytime); and operate the marketplace features you choose to use (once the marketplace is open).

We do not sell your personal information.

The Service lets you create a shareable link and a PDF export of certain plans (for example, your day-of timeline or your lookbook) so you can share them with people you choose, such as your vendors. When you choose to create a share link or export:

• A share link is created only by your deliberate action; it is unlisted (accessible only to someone who has the link), it can be revoked by you, and it stops working when you revoke it or delete your account.
• You control what is included. If you choose to include your uploaded inspiration images in a shared link or export, those images (and any captions you added) will be visible to anyone you give the link or file to. If you do not want an image shared, do not include it.
• Because uploaded images and captions you choose to share become visible to the people you share with, please only upload and share images and text that you have the right to use and share.

When the marketplace is open and an item sells, we need to get the buyer's shipping details to the seller so the item can be shipped. In that process, a buyer's name, shipping address, and phone number are shown to the seller of that item, and stored temporarily so the seller can complete the shipment. This information is visible only to the seller involved in that sale; it is not used for marketing and is not shared more broadly. We keep this shipping information only as long as needed to complete the sale — it is removed automatically after the sale is fulfilled, and in any case within a short retention period afterward.

We do not sell your personal information or share it for others' advertising. We share information only with the service providers we use to run the Service, and only as needed:

• Database and hosting — we use Turso (database) and Vercel (application hosting) to store and serve the Service. Our server logs are kept free of personal information.
• Analytics — we use Vercel's cookieless, privacy-preserving page analytics, which counts page views without cookies, cross-site tracking, or personal data.
• Image and photo storage — your uploaded inspiration images, and (for the marketplace) seller listing photos, are stored with Vercel Blob. Images are stripped of embedded location/EXIF data before storage.
• The marketplace — when a buyer purchases a pre-owned item from a seller on the marketplace, checkout and payment are processed by Stripe, our payment processor. Stripe collects and processes the buyer's payment information; we do not store buyers' full payment card numbers. Stripe splits the payment between the seller and The Aisle Exchange (our commission) and sends the seller their share.
• Our retail store — our own first-party store (curated new decor sold by The Aisle Exchange), when open, sells through Shopify, which handles checkout and payment processing for those direct sales; Shopify collects and processes buyers' payment card information for store purchases. These are two separate channels: the marketplace is bride-to-bride resale processed by Stripe; the store is our own inventory processed by Shopify.
• Email — we use Resend to send email.
• Sign-in — if you use Google sign-in, Google processes your sign-in.

Each provider only receives what it needs to perform its function. We may also disclose information if required by law or to protect the rights and safety of our users or the Service.

We take reasonable measures to protect your information. Passwords are stored using strong one-way hashing (bcrypt) — we never store them in readable form. Sessions are maintained with a secure, HTTP-only cookie. Uploaded images are stored at unlisted, hard-to-guess locations. We limit our data collection to what the Service needs and avoid advertising trackers. No online service can be perfectly secure, but we work to protect your information and to handle it carefully.

If a security incident compromises your personal information, we will notify you and any regulators as required by applicable law, including Pennsylvania's Breach of Personal Information Notification Act, 73 Pa. C.S. § 2301 et seq.

• Access / export your data — You can download a copy of your data from your account settings. Your export includes your account and planning information (including your uploaded inspiration images) and excludes sensitive security data (such as password hashes and login tokens).
• Delete your account — You can delete your account at any time from your settings. Deleting your account permanently removes your account and planning data — including your guest list, your uploaded inspiration images, and any waitlist entry tied to your email — from our systems. (One exception for sellers, once the marketplace is open: if we still owe you a payout from a sale, we ask you to resolve that with us before deletion. We will tell you if this applies.)
• Marketing emails — If you opted in, you can opt out at any time.
• Depending on where you live, you may have additional rights over your personal information (such as access, correction, or deletion). Contact us at contact@theaisleexchange.com and we'll help.

(Note: if you only joined the marketplace waitlist and never created an account, contact us at the email above to have your waitlist entry removed.)

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your account and planning data (including uploaded images) as described above. Marketplace shipping information is kept only as long as needed to complete a sale — it is removed automatically after the sale is fulfilled, and in any case within a short retention period afterward (Section 4A). Some records related to completed transactions may be retained as needed for legitimate business, accounting, or legal purposes.

The Service is intended for adults. You must be at least 18 to use it, and we do not knowingly collect information from anyone under 18, including any personal information from children under 13 (consistent with COPPA). If we learn we have collected such information, we will delete it.

We may update this Policy as the Service evolves. If we make material changes, we'll take reasonable steps to let you know. The “last updated” date above reflects the most recent version.

Questions or requests about your privacy? Email us at contact@theaisleexchange.com.