How your data is protected
Every permission screen links here. You can also read it before signing up.
Sign-in
Each person signs in with a passkey or an email code.
Who can see what
Nobody at Rosela opens documents, email, guest lists or photos. Any support access appears in the access log, only under a grant you give for the days you choose, and you can revoke it early.
Where it lives
Encrypted in transit and at rest, stored in the United States, and never used to train anything outside your own wedding.
How long it is kept
Receipts keep only the lines you picked. "Delete everything" removes every copy within 30 days, after offering the full export.
Checked by someone else
A yearly independent security audit, with its summary on this page.
The summary appears here once the first audit is done.
No personal inbox
Rosela never connects to your email. Each wedding has its own address.