Privacy Policy

Information you provide when you create an account. When you sign up, we collect your name, email address, and password (which we store only in a securely hashed form — see Security below). If you choose to sign in with Google, we receive basic profile information from Google to create your account. At signup you may also choose — entirely optionally — to receive marketing emails; this is off by default and you can opt out at any time.

Information you enter using the planning tools. As you use the Service, you may enter:

• Style quiz results — we keep only general style and preference categories, not your individual selections; quiz answers in progress stay in your browser until you save them.
• Budget information — the figures and categories you enter to plan your budget.
• Guest list information — names and, where you choose to add them, contact details, meal or dietary notes, and mailing addresses for the people you invite (see Section 2 below).
• Seating arrangements, vendor notes, timeline, and checklist items — the planning details you enter.
• Inspiration images you upload — You may upload your own inspiration images and “pin” them beside elements of your lookbook. These images are processed to remove embedded location/EXIF data before storage, are stored privately to your account, and you may add an optional short caption to each. You choose whether to include them in a shareable link or PDF export (see Sections 4A and 5).

Information related to the marketplace. If you choose to sell, we collect the listing details and photos you provide. To pay you, we use Stripe, our payment processor: you will set up a Stripe account, and Stripe collects the identity, tax, and bank information needed to verify you and send your payouts. We do not store your bank account numbers, full tax identification numbers, or government-ID details ourselves — Stripe handles that information directly as our payment processor. Depending on your selling activity and applicable law, we may also collect and verify additional identity, contact, tax, or financial information from you — directly or through a verification service provider — and we may need to obtain seller information required by law from our payment processor, in order to operate the marketplace and meet our legal obligations. If you join a waitlist to be notified when the marketplace opens, we collect the email address (and optional name/note) you provide for that purpose only.

High-volume seller information (INFORM Consumers Act). If your sales activity on the marketplace exceeds certain volume thresholds, federal law (the INFORM Consumers Act, 15 U.S.C. § 45f) and Pennsylvania law require us to collect, verify, and be able to produce certain seller identity, bank-account, tax-identification, and contact information, and to disclose certain of that information to consumers who buy from you — such as your name and a current business or contact address and phone number. Where legally available, limited exceptions may allow a residential street address or a personal phone number not to be publicly displayed. We will notify you before these requirements apply to you. Information we collect solely to meet these INFORM and Pennsylvania requirements is used only for the purposes the law permits and is protected with reasonable administrative, physical, and technical safeguards.

Reports of suspicious activity. Marketplace listings from high-volume sellers include a way to report suspicious activity — such as suspected fraud, counterfeit goods, or unsafe or stolen items. If you submit a report, we collect the information you provide (and related details about the listing or transaction) and use it to investigate the report, keep the marketplace safe, enforce our policies, and meet our legal obligations.

Information collected automatically. To understand how the Service is used so we can improve it, we use analytics that record usage and interaction data — the pages you view, the links and buttons you click, and how you move through the Service. We use Vercel's cookieless page analytics (which counts page views without cookies or cross-site tracking) and HeyCatch, a product-analytics tool that processes this usage data through its analytics provider, PostHog; both operate in the United States. To recognize repeat visits within a session, HeyCatch sets a cookie and stores an identifier in your browser's local storage — so, in addition to the essential cookie that keeps you signed in, the Service now uses this analytics cookie. This is a change from our previous cookieless approach. When you're signed in, we link this usage data to an internal account identifier — a random ID, never your name or email address — so we can understand how the Service is used across your visits and devices; signing out ends that link on that browser.

This is usage analytics, not surveillance: we do not record your screen or session, and we do not capture what you type into forms. We also take steps to keep the parts of the Service that display personal information — such as your guest list, your account details, and buyer shipping addresses — out of this automatic collection. We do not use advertising trackers, and this analytics data is used only to measure and improve the Service, never for advertising.

Some planning tools — especially the guest list — let you enter information about other people, such as your guests' names, contact details, meal or dietary preferences, and mailing addresses. You enter this information to plan your own event.

Because this information is about people who are not our users, please only enter what you need for planning, and only if you have permission to provide it. We store it securely, keep it accessible only to your account, include it if you export your data, and delete it completely when you delete your account or the related guest entries. We use it solely to provide the planning tools to you — we do not use it for our own marketing or share it for advertising.

We use the information we collect to: provide and operate the planning tools and your account; save and display the plans, lists, images, and preferences you create; secure your account and the Service; understand how the Service is used through analytics (see Section 1); communicate with you about your account or the Service; send marketing emails only if you opted in (you can opt out anytime); and operate the marketplace features you choose to use (once the marketplace is open).

We do not sell your personal information.

The Service lets you create a shareable link and a PDF export of certain plans (for example, your day-of timeline or your lookbook) so you can share them with people you choose, such as your vendors. When you choose to create a share link or export:

• A share link is created only by your deliberate action; it is unlisted (accessible only to someone who has the link), it can be revoked by you, and it stops working when you revoke it or delete your account.
• You control what is included. If you choose to include your uploaded inspiration images in a shared link or export, those images (and any captions you added) will be visible to anyone you give the link or file to. If you do not want an image shared, do not include it.
• Because uploaded images and captions you choose to share become visible to the people you share with, please only upload and share images and text that you have the right to use and share.

When the marketplace is open and an item sells, we need to get the buyer's shipping details to the seller so the item can be shipped. In that process, a buyer's name, shipping address, and phone number are shown to the seller of that item, and stored temporarily so the seller can complete the shipment. This information is visible only to the seller involved in that sale; it is not used for marketing and is not shared more broadly. We keep this shipping information only as long as reasonably necessary to fulfill and administer the sale and to satisfy our legal, accounting, fraud-prevention, and dispute-resolution obligations. In practice, a buyer's shipping details are removed from the seller's access after the sale is fulfilled; any records we retain afterward are limited to what those obligations reasonably require.

We do not sell your personal information or share it for others' advertising. We share information only with the service providers we use to run the Service, and only as needed:

• Database and hosting — we use Turso (database) and Vercel (application hosting) to store and serve the Service. We configure our systems to minimize personal information in application and server logs, and we avoid intentionally logging sensitive account, payment, guest-list, or shipping information.
• Analytics — we use Vercel's cookieless page analytics and HeyCatch — a product-analytics tool that processes data through its provider, PostHog — to understand how the Service is used. HeyCatch and PostHog operate in the United States and receive usage and interaction data such as pages viewed and clicks; it is used only to measure and improve the Service, never for advertising.
• Image and photo storage — your uploaded inspiration images, and (for the marketplace) seller listing photos, are stored with Vercel Blob. Images are stripped of embedded location/EXIF data before storage.
• The marketplace — when a buyer purchases a pre-owned item from a seller on the marketplace, checkout and payment are processed by Stripe, our payment processor. Stripe collects and processes the buyer's payment information; we do not store buyers' full payment card numbers. Stripe splits the payment between the seller and The Aisle Exchange (our commission) and sends the seller their share.
• Our retail store — our own first-party store (products sold directly by The Aisle Exchange), when open, sells through Shopify, which handles checkout and payment processing for those direct sales; Shopify collects and processes buyers' payment card information for store purchases. These are two separate channels: the marketplace is bride-to-bride resale processed by Stripe; the store is our own inventory processed by Shopify.
• Email — we use Resend to send email.
• Sign-in — if you use Google sign-in, Google processes your sign-in.

Each provider only receives what it needs to perform its function. We may also disclose information if required by law or to protect the rights and safety of our users or the Service.

We take reasonable measures to protect your information. Passwords are stored using industry-standard one-way password hashing — we never store them in readable form. Sessions are maintained with a secure, HTTP-only cookie. Uploaded images are stored at unlisted, hard-to-guess locations. We limit our data collection to what the Service needs and avoid advertising trackers. No online service can be perfectly secure, but we work to protect your information and to handle it carefully.

If a security incident compromises your personal information, we will notify you and any regulators as required by applicable law, including Pennsylvania's Breach of Personal Information Notification Act, 73 Pa. C.S. § 2301 et seq.

• Access / export your data — You can download a copy of your data from your account settings. Your export includes your account and planning information (including your uploaded inspiration images) and excludes sensitive security data (such as password hashes and login tokens).
• Delete your account — You can delete your account at any time from your settings. Deleting your account removes your account and planning data — including your guest list, your uploaded inspiration images, and any waitlist entry tied to your email — from our systems. Some records may be retained after deletion where we reasonably need them for completed transactions, taxes and accounting, disputes and chargebacks, fraud prevention and security, legal compliance, and marketplace identity-verification records; we keep only what is reasonably necessary for those purposes. (One exception for sellers, once the marketplace is open: if we still owe you a payout from a sale, we ask you to resolve that with us before deletion. We will tell you if this applies.)
• Marketing emails — If you opted in, you can opt out at any time.
• Depending on where you live, you may have additional rights over your personal information (such as access, correction, or deletion). Contact us at contact@theaisleexchange.com and we'll help.

(Note: if you only joined the marketplace waitlist and never created an account, contact us at the email above to have your waitlist entry removed.)

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your account and planning data (including uploaded images) as described above, subject to the limited retention exceptions noted under “Delete your account” above. Marketplace shipping information is kept only as long as reasonably necessary to fulfill and administer the sale and to meet our legal, accounting, fraud-prevention, and dispute-resolution obligations; a buyer's shipping details are removed from the seller's access after the sale is fulfilled (Section 4A). Some records related to completed transactions, taxes, disputes, fraud prevention, security, and marketplace verification may be retained as needed for legitimate business and legal purposes.

The Service is intended for adults. You must be at least 18 to use it, and we do not knowingly collect information from anyone under 18, including any personal information from children under 13 (consistent with COPPA). If we learn we have collected such information, we will delete it.

We may update this Policy as the Service evolves. If we make material changes, we'll take reasonable steps to let you know. The “last updated” date above reflects the most recent version.

Questions or requests about your privacy? Email us at contact@theaisleexchange.com.