Privacy Policy

Zemed (zemed.co.uk) is run by Ella Tech, Tito St, Addis Ababa, Ethiopia. We decide how your information is used. For any privacy question or request, email munir@ellatech.co.uk.

• Your account: name, email address and whether you are a couple or a vendor. Passwords are handled by our sign-in provider (Amazon Cognito); we never store them. If you sign in with Google, Google shares your name and email with us.
• Your invitation: names, date, time, venue, message, the design you choose and any photos you upload.
• Your guest list: names, sides, tables and contact details that a couple or the people they share access with add.
• Replies from guests: name, email or phone if given, whether you are coming, party size, dietary notes and any message for the couple.
• Vendor listings: business details, prices, contact details and photos, and booking requests couples send.
• Payments: the amount, currency, status and the payment provider's reference. Card and mobile-money details are entered on the provider's page and never reach Zemed.
• Security and usage: your IP address (to stop abuse and limit repeated attempts), the type of device and browser, and the actions you take on the site. In our own usage records the IP address is stored only in scrambled (hashed) form.

• To run the service: create and publish invitations, collect replies, issue entry passes and check guests in.
• To send the emails the service needs, such as sign-up codes, password resets and RSVP confirmations.
• To take payments and show couples a vendor's details after an unlock.
• To keep Zemed secure, prevent spam and fraud, and fix problems.
• To send our newsletter, only if you sign up for it. Every newsletter has an unsubscribe link.

We do not sell your information and we do not show advertising.

We use trusted providers to run Zemed. Each only receives what it needs:

• Amazon Web Services: hosting, database, photo storage, sign-in and the optional AI message writer.
• Stripe: card payments. Card payments appear on statements as "INJERA* ZEMED".
• LakiPay: Ethiopian mobile-money payments (Telebirr, CBE Birr and others).
• Brevo: sends our emails and records whether they are delivered, opened or clicked.
• Cloudflare: the security check that tells people from bots on sign-in, sign-up and RSVP forms.
• OpenStreetMap: venue search and maps, which receive the place you search for.
• Google: only if you choose to sign in with Google.

People you share an invitation with (a planner, family or gate staff) see the guest information their role allows. Anyone with a published invitation's link can see the invitation itself. A vendor's name and contact details are shown only to couples who unlock them.

Our servers and database are in Stockholm, Sweden, with backup copies in Ireland. We keep your information while your account is open. When you ask us to delete your account we remove it from the live system; backup copies are deleted automatically within 90 days.

• You can ask for a copy of your information, ask us to correct it, or ask us to delete your account.
• Guests can change their reply using the private link in their confirmation email, or ask the couple or us to remove it.
• You can turn on two-factor sign-in in Account security.

Email munir@ellatech.co.uk and we will reply within 30 days.

• zemed_session keeps you signed in for up to 30 days. It is essential and cannot be switched off.
• A short-lived cookie protects Google sign-in from being hijacked; it is deleted after sign-in.
• Your browser remembers your private RSVP link for each invitation you reply to, so you can change your answer later.
• Cloudflare's security check runs from Cloudflare's own site and may keep its own data there to recognise bots.

We do not use advertising or third-party tracking cookies.

You must be 18 or over to create an account. Guests of any age may be listed on an invitation by the couple.

If we change this policy we will update the date at the top of this page. See also our Terms of Service and Contact page.