Privacy Policy

Data Controller

Almacarta is operated by a U.S. company. The data controller (the "business" under U.S. law) of the personal data collected via almacarta.com is:

Entity

Alma Holding LLC (Wyoming, United States)

Address

30 N Gould St, Ste R, Sheridan, WY 82801, United States

Email

contact@almacarta.com

The company's registration and tax identification numbers are not published on this site for security reasons. They are disclosed to the competent authorities as well as to any person with a legitimate interest, upon simple request to contact@almacarta.com.

As Almacarta is a company established in the United States, the processing of your data is primarily governed by applicable U.S. law, in particular the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), for California residents. For users residing in the European Union, the General Data Protection Regulation (GDPR) may also apply; such users then have the right to lodge a complaint with their national supervisory authority.

1. Data Collected

In connection with the use of the Almacarta platform, we collect the following data:

• Identification data: last name, first name, email address
• Event data: names of the couple, event date, venue, program details
• Media data: photos of the couple, guestbook photos, uploaded images
• RSVP data: guest names, confirmation status, dietary restrictions, accompanying guests

2. Use of Data

Your data is used exclusively for:

• Creating and personalizing your digital invitation
• Managing RSVPs and attendance confirmations
• Generating the guestbook, photo album, and seating plan
• Sending notifications related to your event (new confirmations, messages)
• Improving the service and customer support

We never sell, rent, or share your personal data with third parties for commercial purposes.

3. Data Storage

Your data is securely stored on the following infrastructure:

• Database: Neon Postgres (encryption at rest and in transit)
• Media files: Vercel Blob (secure cloud storage)
• Hosting: Vercel (SOC 2 certified, enforced HTTPS)

4. Cookies

Almacarta uses cookies strictly necessary for the operation of the service:

• Session cookie: managed by Neon Auth, used to keep you signed in
• Vercel Analytics: anonymized browsing data (no advertising tracking)

We do not use any advertising cookies or third-party trackers.

5. Your Rights

Depending on your place of residence, you have rights over your personal data. California residents benefit from the rights provided by the California Consumer Privacy Act (CCPA / CPRA); European Union residents benefit from the rights provided by the GDPR. These rights notably include:

• Right to access / to know: obtain a copy of your personal data and know the categories collected and their purpose
• Right to rectification: correct inaccurate data
• Right to deletion: request the erasure of your data
• Right to opt out of the "sale" or sharing: Almacarta does not sell or share your data for advertising purposes
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to non-discrimination: no unfavorable treatment as a result of exercising your rights

6. Contact & exercising your rights

To exercise your rights or for any question regarding your personal data, contact us at: contact@almacarta.com

We commit to responding to any request within 30 days.