1.Who we are
nuptialmassbooklet.com is operated by House of Catena, LLC, a limited liability company organized in Virginia, United States, doing business as NuptialMassBooklet (“we,” “us,” “our”). We provide an online editor that lets couples personalize and download print-ready Catholic nuptial Mass booklets.
This policy explains what we collect, why, who we share it with, and the choices you have. It applies to our website and the booklet editor. If you disagree with it, please don’t use the service.
2.Information we collect
Information you give us
- Account details — your first and last name, email address, and password. Passwords are stored only as a salted cryptographic hash; we never store or can read your actual password.
- Optional profile details — phone number, profile photo, and your title.
- Wedding details — your partner’s name, wedding or ceremony date, and the parish or church where the ceremony takes place.
- Booklet content — everything you enter into the editor, which may include the names of your wedding party, celebrant and readers, your chosen readings, hymns and Mass settings, and any dedications or personal messages.
- Photos you upload — cover images and any other artwork you add to a booklet.
- Messages — the contents of emails or support requests you send us.
Information collected automatically
- Session records — when you sign in we record your IP address and browser user-agent alongside the session, so you can see and revoke active sessions and so we can detect suspicious sign-ins.
- Server logs — standard request logs kept by our hosting provider for security and reliability.
- One essential cookie — see our Cookie Policy.
Payment information
Payments are processed by Stripe on Stripe-hosted pages. Your card number never reaches our servers and we never see or store it. What we do store is the record of the transaction: a Stripe customer identifier, a payment identifier, the amount, date, and status of your order.
4.How we use your information
- To create your account and sign you in.
- To save your booklets and render them into print-ready PDF files.
- To take payment and issue your download.
- To send transactional messages — order confirmations, password resets, email verification, and notices about your booklets.
- To respond to your support requests.
- To keep the service secure: detecting fraud, abuse, and unauthorized access.
- To meet legal, tax, and accounting obligations.
- To understand which templates and features are used, so we can improve them.
- To send occasional news, tips, or offers — only where you have opted in. Your notification preferences are in your account settings, and every marketing email has an unsubscribe link. Turning off marketing does not stop transactional messages about your orders.
5.We do not sell your personal data
Plainly stated
We do not sell your personal data. We do not share it for targeted or cross-context behavioral advertising. We do not use advertising networks, third-party analytics, social media pixels, or cross-site tracking of any kind — there are no such scripts on this site. We do not use your booklet content, your photos, or your wedding details to train machine-learning models.
Because we don’t engage in these practices at all, there is nothing for you to opt out of. If that ever changes, we will update this policy and give you a genuine choice before the change takes effect.
6.Who we share information with
We share personal data only with service providers who help us run the service, and only as much as they need:
Stripe
Payment processing and billing. Stripe receives your email and payment details directly and acts as an independent controller of that data under its own privacy policy.
Cloudflare
Website hosting, application delivery, our database, and storage of your uploaded photos and generated PDF files.
Email delivery
A transactional email provider used to send verification, password-reset, and order messages.
We may also disclose information:
- To comply with law, a subpoena, or a valid legal request, or to establish or defend legal claims.
- To protect the rights, property, or safety of our users, the public, or us — including fraud prevention.
- In connection with a merger, acquisition, or sale of assets, in which case we will give notice before your data becomes subject to a different privacy policy.
- To anyone else, with your direction or consent.
7.Cookies
We set exactly one cookie, and it is strictly necessary: the session token that keeps you signed in. We use no analytics, advertising, or tracking cookies, and we do not use browser local storage. Full detail is in our Cookie Policy.
8.How long we keep your data
Account information
Kept while your account is open, and deleted within 30 days of you closing it, except where we must retain records by law.
Booklets, photos and PDFs
Kept until you delete them or close your account. Deleting a booklet removes its content and generated files.
Order and payment records
Retained for up to seven years after the transaction to meet US tax, accounting, and audit obligations. This is required and is not affected by a deletion request.
Session records
Sessions expire after seven days; the associated records are cleared on expiry or sign-out.
Support correspondence
Kept for up to three years so we have context if you write to us again.
9.How we protect your data
- All traffic is encrypted in transit with HTTPS.
- Passwords are stored as salted hashes using a memory-hard algorithm — never in plain text.
- Session cookies are HttpOnly and SameSite-restricted, so they cannot be read by scripts in your browser.
- Card data is handled entirely by Stripe, a PCI-DSS Level 1 certified processor, and never touches our systems.
- Access to production data is limited to the people who need it to operate the service.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Use a strong, unique password and tell us promptly at support@nuptialmassbooklet.com if you believe your account has been compromised.
10.Your privacy rights
Depending on where you live you may have some or all of the rights below. We extend them to every user, wherever you live, rather than only where a statute compels it.
- Access — confirm whether we process your data and get a copy of it.
- Correct — fix inaccurate personal data. Most fields you can edit yourself in account settings.
- Delete — ask us to delete your personal data, subject to records we must legally keep.
- Portability — receive your data in a portable, machine-readable format.
- Opt out — of sale, targeted advertising, and profiling with legal or similarly significant effects. As stated above, we do none of these.
- Withdraw consent — for the sensitive (religious) data described in section 3.
- Non-discrimination — we will not deny service, change prices, or degrade quality because you exercised a privacy right.
How to exercise them
Email support@nuptialmassbooklet.com from the address on your account, and tell us what you would like to do. We may need to verify your identity before acting — for sensitive requests that may mean confirming details of a recent order. We respond within 45 days, and may extend once by a further 45 days where a request is complex, telling you why.
If we decline — your right to appeal
Virginia law gives you the right to appeal a refusal. Reply to our decision with the word “appeal” and your reasons; we will review and respond in writing within 60 days. If we deny the appeal, you may contact the Virginia Attorney General’s Office to submit a complaint. Residents of other states may likewise contact their own Attorney General.
You may use an authorized agent to make a request on your behalf where the law allows, provided we can verify their authority.
11.Children’s privacy
The service is intended for adults arranging a wedding. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, write to support@nuptialmassbooklet.com and we will delete it.
12.Do Not Track and Global Privacy Control
Because we do not track you across websites or serve advertising, there is no cross-site tracking for a Do Not Track or Global Privacy Control signal to switch off. Where such a signal legally counts as an opt-out of sale or targeted advertising, we honor it — though as explained above, we do not engage in either.
13.Links to other sites
Our pages link to third-party sites — printing services, for example, and Adobe’s reader download. We don’t control them and are not responsible for their content or privacy practices. Read their policies before giving them your information.
14.Where your data is processed
We are based in the United States and process and store data there. If you use the service from outside the US, you understand that your information will be transferred to and handled in the US, where data protection law may differ from your own country’s.
15.Changes to this policy
We may update this policy as the service evolves or the law changes. We will revise the “last updated” date at the top, and for material changes we will give prominent notice — by email or an in-app notice — before they take effect. Continuing to use the service after that means you accept the updated policy.