Privacy

For the account holder: name, email address and a hashed password. Passwords are never stored in a readable form and cannot be recovered, only reset.

For your customers: whatever your shop enters — name, contact details, appointments, orders, payment records, fitting notes and any photos you upload. This is your data. We process it so the product can show it back to you.

We do not sell data, and we do not use the records inside a shop's workspace to advertise to anyone.

The application and its database run on infrastructure in the United States. Email is sent through Resend. Uploaded images are stored in Vercel Blob. Card payments, when you subscribe to a paid module, are handled by Stripe — card numbers never reach our servers.

Each shop's records are isolated by workspace. Every query is scoped to the workspace of the signed-in user; staff you invite see only your workspace, and only what their role permits.

Some features produce links that work without a login — an online booking page, a customer portal link, a contract to sign. Those links carry a long random token rather than a guessable id, and they open only the record they were issued for. Treat them the way you would treat a password: anyone holding the link can open that record.

You can delete individual records at any time from inside the product. To have an entire workspace and everything in it deleted, email hello@bridalstack.com from the account's email address; deletion is permanent and removes the associated customer records too.

If you want a copy of your data before deleting, ask in the same email and we will provide an export.

Questions about this page, or about data held for a specific bride: hello@bridalstack.com.