Service Providers
Last updated 29 July 2026
The full list of companies that handle any part of your information for us. We keep it up to date and name every one of them — saying “trusted partners” and leaving it at that tells you nothing.
1. Who we work with
Each of these handles your information only on our written instructions, under a contract that holds them to the same standards we hold ourselves to. None of them may use it for their own purposes.
| Provider | What it does | Data it receives | Location |
|---|---|---|---|
| Google Cloud Platform / Firebase App Hosting | Runs the application and stores uploaded images | All application data | EU / India / US |
| MongoDB Atlas | The primary database | All application data | EU / India |
| Razorpay Software Pvt. Ltd. | Takes payments and issues receipts | Name, email, mobile, amount. We never receive or store your card number. | India |
| Google (Gemini via Genkit) | Generates invitation wording when you use the AI writer | Only what you put in the form: couple names, wedding date, venue name. No account identifiers, no guest data. | US |
| Email delivery (SMTP / Mailgun) | Sends account, RSVP and reminder emails | Recipient name and email address, email content | EU / US |
| Google Analytics | Counts visits — only if you consent | Truncated IP, page views, device and browser type | EU / US |
| OpenStreetMap Nominatim | Turns venue coordinates into a country name | Venue coordinates only. No personal identifiers are sent. | EU (Germany) |
| Courier partners | Delivers printed cards and NFC cards, when you order them | Recipient name, postal address, phone number | India and destination country |
2. What we removed, and what replaced it
In July 2026 we stopped sending visitor IP addresses to ipapi.co, a third-party geolocation service in the United States. It was used only to work out which currency to show you — and to answer that question it received the IP address of every person who opened the site.
We now answer it ourselves. The application ships with an IP-to-country database file and performs the lookup locally, on our own servers. The database vendor is not a sub-processor and is deliberately absent from the list above: we download a file from them, they receive nothing from us — not your IP address, not the fact that you visited. No personal data leaves our infrastructure for geolocation, so there is no transfer, no third party, and nothing for you to consent to.
3. International transfers
We are established in India. Indian law allows information to be sent to any country the government hasn't restricted. We keep an eye on that list, and if a country we use is ever added to it we will move or stop that processing.
Separately, and by choice, we sign the strongest data protection agreements available with every provider on this list — the same ones European businesses are required to use. We apply them to everyone's information, not only to users in Europe, because there is no good reason to protect one group better than another.
4. Changes to this list
Before we add a new company that handles your information, we will update this page at least 30 days in advance. If you have a genuine concern about one of them, tell us at support@wed.cards within those 30 days and we will work with you to resolve it — or you may terminate the affected service without penalty.
This commitment is part of our Guest Data Agreement, which governs the guest data you upload.