Legal
AisleReady — Privacy Policy
A platform and product of Rosimo FZE LLC, registered in the Ajman Free Zone, United Arab Emirates.
Last updated: 29 July 2026
1. Introduction and Scope
Rosimo FZE LLC ("Rosimo FZE LLC", "we", "us", "our") respects your privacy and is committed to protecting the personal data of users of AisleReady (the "Platform"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you, in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL") and other applicable UAE laws.
This Policy applies to account holders (couples and collaborators) and to guests who interact with the Platform through an RSVP link, as well as visitors to our public wedding website pages.
2. Who We Are
Rosimo FZE LLC — registered in the Ajman Free Zone, United Arab Emirates. We act as data controller for account holder data, and as data processor for guest data submitted by account holders, as described in Section 3. Contact for privacy matters: privacy@aisleready.com.
3. Personal Data We Collect
3.1 Data you provide directly
- Account data: name, email address, password (hashed), profile photo (optional);
- Wedding data: partner names, wedding date, venue, budget figures, theme preferences;
- Vendor data: names, contact details, contracts, and notes you record about vendors you work with;
- Guest data: names, email addresses, phone numbers, RSVP status, meal choices, dietary notes, and table assignments you or your guests submit;
- Payment data: billing name and address; card details are collected and stored directly by Stripe and are not stored on our servers;
- Content you upload: photos, wedding website text, and files attached to vendor or task records;
- Communications: messages you send to our support team.
3.2 Data collected automatically
- Usage data: pages visited, features used, timestamps, and general interaction patterns;
- Device and log data: IP address, browser type, device type, and operating system;
- Cookies and similar technologies, as described in Section 9.
3.3 Data from guests
When a guest submits an RSVP via a unique link, we collect the information they enter (name, attendance status, meal choice, dietary notes) on behalf of the account holder who sent the invitation. Guests do not need to create an account.
4. How and Why We Use Personal Data
We process personal data on the following legal bases recognised under the PDPL: performance of a contract with you, your consent, compliance with a legal obligation, and our legitimate interests (such as securing and improving the Platform), balanced against your rights and freedoms.
- To create and manage your account and authenticate your login;
- To provide the core features of the Platform: vendor checklist, budget tracker, guest list and RSVP collection, wedding website hosting, and task reminders;
- To process payments and manage subscriptions via Stripe;
- To send transactional emails, such as RSVP confirmations, task reminders, and billing receipts;
- With your consent, to send product updates or promotional communications, which you may opt out of at any time;
- To monitor, secure, and improve the performance and reliability of the Platform;
- To detect, prevent, and investigate fraud, abuse, or violations of our Terms of Service;
- To comply with applicable UAE legal and regulatory obligations.
5. Sharing of Personal Data
We do not sell personal data. We share personal data only in the following circumstances:
5.1 Service providers (data processors)
- Supabase — database hosting, authentication, and file storage;
- Stripe — payment processing and subscription billing;
- Email delivery providers (e.g. Resend) — sending transactional and, where consented, marketing emails;
- Cloud infrastructure and analytics providers necessary to operate and secure the Platform.
These providers process personal data only on our documented instructions and are contractually bound to appropriate confidentiality and security obligations, consistent with PDPL requirements for engaging data processors.
5.2 Other account holders and guests
Guest data you submit is visible to you and to any collaborators you invite to your wedding account. Wedding website content you choose to make public is visible to anyone with the link or, if applicable, indexed by search engines.
5.3 Legal and safety disclosures
We may disclose personal data where required by UAE law, court order, or governmental request, or where necessary to protect the rights, property, or safety of Rosimo FZE LLC, our users, or the public.
5.4 Business transfers
If we undergo a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to equivalent protections.
6. International and Cross-Border Data Transfers
Some of our service providers may process or store data outside the United Arab Emirates. Where we transfer personal data outside the UAE, we take steps to ensure the receiving jurisdiction offers an adequate level of protection, or we rely on appropriate contractual or other safeguards, consistent with Articles 22 and 23 of the PDPL governing cross-border data flows.
7. Data Retention
We retain personal data for as long as your account is active and as necessary to provide the Services. Following account deletion, we retain data only as required to: comply with legal, tax, or accounting obligations under UAE law; resolve disputes; and enforce our agreements. Guest RSVP data is retained for as long as the related wedding account exists, unless the account holder deletes it sooner, or a guest exercises a deletion right under Section 8.
8. Your Rights
Subject to the conditions and exceptions set out in the PDPL, you may have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure of your personal data, subject to legal retention requirements;
- Object to or request restriction of certain processing, including direct marketing;
- Request a copy of your data in a portable format, where technically feasible;
- Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
- Lodge a complaint with the UAE Data Office or other competent regulator.
Guests who wish to exercise these rights over data submitted about them by an account holder should first contact the account holder (the couple) who sent the invitation; guests may also contact us directly and we will coordinate with the relevant account holder as needed.
To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before actioning a request.
9. Cookies and Similar Technologies
We use essential cookies necessary for authentication and core functionality, and, where you consent, analytics cookies to help us understand how the Platform is used. You can control non-essential cookies through your browser settings or any in-app cookie preference tool we provide. Disabling essential cookies may prevent parts of the Platform from working correctly.
10. Data Security
We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, database row-level security to isolate each wedding's data, and restricted internal access to personal data on a need-to-know basis. No system is completely secure, and we cannot guarantee absolute security, but we work to promptly investigate and, where required by law, notify affected users and the competent authority of any data breach affecting their personal data.
11. Children's Data
The Platform is not directed at children, and we do not knowingly collect personal data from individuals under 18 in relation to account registration. Guest lists may occasionally include the names of minors (e.g. children attending as guests) submitted by an account holder; this data is used solely for event-planning purposes such as headcounts and meal choices.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements, including forthcoming PDPL executive regulations. We will post the updated Policy with a revised "Last updated" date and, for material changes, provide reasonable notice through the Platform or by email.
13. Contact Us
For questions about this Privacy Policy or to exercise your data protection rights, contact:
Rosimo FZE LLC
Registered in the Ajman Free Zone, United Arab Emirates
Email: privacy@aisleready.com