Migration agreement

It covers the files you send us so that we can move your weddings into I Said Yes for you: the files themselves, any working copy we make of them, and the records we create from them in your workspace while we do it.

It sits beside our terms and the processor commitments in our privacy policy, which cover everything you put into I Said Yes yourself. Where this agreement says something more specific about your files, this agreement applies.

You are the controller of the personal data in your files: you decide why it is held and what happens to it. We are your processor. We act only on your instructions, which are this agreement and anything you ask of us in writing, and we tell you straight away if we think an instruction would break data protection law.

Whatever your current tool or spreadsheet exports, which is usually:

• your couples' names, contact details, wedding dates and venues;
• guests' names, households, contact details, replies and meal choices;
• guests' dietary and access needs, which can reveal health information and are special category data under Article 9 of the UK GDPR;
• suppliers' names and contact details;
• budgets, payments and running orders;
• contracts and quotes, if you choose to send them.

We read and tidy your files, move what they hold into your own workspace through the same importer you use yourself, and tell you exactly what came across. We do not use them for anything else: not for marketing, not to train any model, not to profile anyone, and not to share with anyone outside this agreement.

Dietary and access notes are carried across exactly as they are written, in the guest's own words. We never summarise them or decide what they mean.

Anything we cannot read with certainty, such as a date that could be the 3rd of April or the 4th of March, we ask you about rather than guess.

• They go into private storage in Ireland that only your migration can reach. Nobody else can see them or list them.
• They are sent through a single-purpose upload link, never by email and never through a shared drive.
• They are encrypted in transit and at rest.
• Every upload, every download and every deletion is logged with who did it, what it was and when.
• Any working copy lives in the same private storage and is deleted with the originals.

Only the people at I Said Yes who are moving your weddings in, each bound by confidentiality, and these companies, which are our sub-processors for this work:

• Supabase, for the private storage in Ireland;
• Anthropic, whose AI we use to read and tidy your files, and which does not train its models on what it receives through its commercial API;
• Vercel, which runs the application your files pass through;
• Resend, which sends you the emails about your migration.

The full list of the companies I Said Yes uses is published on our sub-processors page. We tell you before we add or change one that would touch your files.

To bring your weddings in through your own importer, an I Said Yes account joins your team as a planner while we do it. It appears in Settings under Team, everything it does shows in your workspace's activity, and it leaves when we send your migration for you to check. You can remove it at any time.

When your weddings are in, we email you exactly what came across, with the numbers, and every judgement we made along the way. Nothing is treated as done until you confirm it. If something is wrong, tell us and we put it right.

• Within 30 days of your confirming the migration, we delete your original files and every working copy. Sooner if you ask.
• If a migration is never finished, your files are deleted 90 days after the last one arrived, and we warn you by email at 60 days.
• We tell you by email when your files have been deleted.

The weddings, guests and other records created in your workspace are yours, and stay under our terms like everything else you keep in I Said Yes.

If we become aware of a personal data breach affecting your files, we tell you without undue delay, and in any case within 48 hours, with what we know and what we are doing about it.

We help you answer requests from the people whose details are in your files, and give you the information you need to show that you and we have met our obligations, including under Article 28 of the UK GDPR.

A new version of this agreement never applies to files you have already sent unless you agree to it. This agreement is governed by the law of England and Wales.