Privacy policy

Policy version: October 31, 2026

Updated October 31, 2026. These policies cover WeWed.io and Bridal Marketing Group. Milc Media LLC operates both services under the Bridal Marketing Group brand. Contact jakki@bridalmarketinggroup.com or 1-800-497-2186.

Who provides WeWed.io

Milc Media LLC operates Bridal Marketing Group (BMG) and its WeWed.io software. BMG provides marketing and business-management services for wedding and event professionals.

Business address: 4400 NE 77th Avenue, Vancouver, WA 98662, United States.
Support: jakki@bridalmarketinggroup.com or 1-800-497-2186.

What this policy covers

BMG processes information submitted to its website and subscriber workspaces. For a subscriber’s couples, guests and vendors, the subscriber determines the purpose of their records and BMG processes those records to provide the service. BMG determines the purposes of account security, billing, support and its own website. Contact 1-800-497-2186 or use the privacy request form.

Information we collect

Account names, email addresses, salted password hashes, business profiles, consent receipts, support requests and subscription status; inquiries and contact details; wedding dates, budgets, guest preferences, questionnaires and timelines; uploaded event files, photographs and videos; approved marketing drafts and provider connection data. Security controls may process connection information and timestamps. Cookie preferences and sign-in sessions use browser storage. We do not ask for card or bank credentials inside BMG; payment providers handle payment details.

How information is used

To save and display your workspace, respond to inquiries, prepare requested marketing, manage events, provide authorized support, connect approved providers, protect accounts, maintain consent and suppression records, and administer billing. Promotional BMG emails require separate optional permission. Workspace access permission is not promotional email permission. Event photographs are used in campaigns only with your authorization and the rights you confirm.

Who receives information

Authorized BMG staff; hosting and storage providers used by the Sites platform; OpenAI for the text or media needed by an software feature; Stripe for subscription billing; QuickBooks when connected; Meta and Google for approved marketing and provider connections; and an email provider when sending is activated. Provider use depends on enabled features. We may disclose information where legally required or needed to protect rights and security. We do not sell workspace records. Optional advertising, if introduced, may involve sharing with ad providers only under the choices and rights described in our cookie policy.

Google and Meta connections

Integration notice updated October 31, 2026. Connections are optional and require permission from an authorized account owner. BMG uses the access granted for the services described below. The workspace identifies connections awaiting activation; authorization alone does not launch paid ads.

Facebook and Instagram

When you authorize Meta access, WeWed receives the account and Page identifiers, Page names, linked Instagram professional-account identifiers and usernames, granted permissions, and access tokens needed to connect your selected business accounts. We use these to offer your available Pages, save your selection, publish approved posts, and support authorized engagement features. For managed advertising, BMG uses authorized Page and Instagram assets, advertising account and campaign details, and performance results to create and manage approved campaigns and report their results.

Google Ads

Google Ads connections are managed by the BMG team. We use authorized advertising-account identifiers, account names, campaign settings, approved budgets, ads and performance results to create and manage campaigns and show campaign reporting. OAuth access and refresh tokens allow the authorized connection to work. Subscribers approve their advertising budget and management fee separately. Google account authorization does not give BMG permission to access unrelated Gmail messages, Drive files or other Google services.

This disclosure applies specifically to Google user data obtained through Google APIs by Bridal Marketing Group and WeWed.io, operated by Milc Media LLC. We share, transfer or disclose that data only to provide the Google-connected features you authorize, for security, or as required by law. The general provider list elsewhere in this policy does not authorize unrelated transfers of Google user data.

Milc Media LLC / authorized Bridal Marketing Group staff: staff providing your authorized service may access the Google Ads account identifiers, campaigns, budgets, advertisements and performance reports needed to manage your advertising or resolve your support request. Access is limited to staff who need it for those tasks.
OpenAI Sites and Cloudflare, our hosting and storage providers: the application processes and stores Google connection records, encrypted OAuth credentials, authorized account information and reports on this infrastructure so your connection and workspace can operate. These providers process this information to host, store and secure the service.
Google: we send OAuth authorization and token-refresh requests to Google and send the account identifiers, campaign settings, approved advertising content and reporting requests necessary to perform your authorized Google Ads actions. Google processes those requests under its own terms and privacy policy.
Authorities or other legally authorized recipients: we may disclose the minimum necessary information when required by applicable law, legal process or to address fraud, abuse or security threats, consistent with the Google API Services User Data Policy.

Other subscribers do not receive your Google connection or private Google reports. We do not sell or rent Google user data, disclose it to data brokers or information resellers, or share it for third-party marketing, creditworthiness or lending. Google OAuth credentials are not supplied to content-generation providers. Google user data is not used or transferred to develop, improve or train generalized or non-personalized Software or machine-learning models. Data obtained through Google Workspace APIs is not used for targeted, personalized or retargeted advertising. Managing a Google Ads campaign at your request is limited to the advertising service you authorize.

Optional Google Search Console connection

If you separately authorize the read-only Search Console connection, we access the authorized website property and search-performance information to display search-visibility reports. This data is processed by Milc Media LLC and its OpenAI Sites / Cloudflare hosting infrastructure, with API requests sent to Google. It is not permission to access Gmail, Drive or unrelated Google services. The Google-data sharing restrictions above also apply to this connection.

Use, sharing and protection

Provider credentials are kept in protected server-side configuration or encrypted connection records, not displayed in subscriber pages. Account identifiers, selected assets and campaign records are stored with the workspace. Authorized BMG staff and the OpenAI Sites hosting platform, including Cloudflare application and storage infrastructure, process the information needed to operate the service. Google and Meta receive the requests needed to perform the authorized action. Human access is limited to service delivery, requested support, security and applicable legal obligations.

We do not sell Google or Meta account data. Google API user data is not used to train generalized software models or build unrelated advertising audiences. We follow the Google API Services User Data Policy, including its Limited Use requirements. Authorized campaign management uses the advertising APIs for the client's requested service; it does not authorize using data obtained from another Google service for advertising.

Disconnecting and deleting integration data

Use Company & connections to disconnect a connected account, and revoke the application's access in your Google or Meta account settings if you also want to withdraw the provider grant. For BMG-managed advertising, contact support to remove the asset connection and pause the affected campaigns; check the confirmed campaign status. Disconnecting does not delete posts already published or provider-held campaign history.

To request deletion of information BMG holds, submit a privacy request, select Delete my data, and name the Google or Meta connection and your business. Do not include passwords, access tokens or app secrets. We verify the requester, coordinate with the responsible subscriber where needed, and remove records no longer needed. Billing, security, consent, suppression and legal records may be retained as described below. We confirm the outcome or explain any required retention. Provider-held records remain subject to that provider's own deletion controls.

Your choices

Decline promotional emails without losing account access. Unsubscribe from the sender’s marketing using the link in the message. Disconnect integrations, choose optional cookies, and use privacy controls. You may request access, correction, portability where applicable, deletion or withdrawal of a permission. Verification may be needed before disclosing or deleting information. A subscriber’s client should contact that business first; BMG can route a request to the responsible subscriber. Necessary service processing and lawful obligations may continue independently of optional marketing consent.

Retention and cancellation

Information remains available while needed for the workspace and requested support. Cancellation stops subscription access and does not necessarily immediately erase all records. We assess deletion requests and remove information no longer required, subject to billing, security, legal-dispute and consent evidence requirements. Minimal suppression records may be retained to avoid sending unwanted email. Anonymous demo accounts are temporary and cleaned up after expiry. Ask support about retention for your account before submitting data requiring a specific deletion deadline.

Security, location and children

Access controls, HTTPS, hashed passwords and protected provider credentials reduce risk; no system is risk-free. Share links act as private access keys: anyone holding a link can see the content it exposes. Providers may process information in the United States and other locations. If your organization needs an international transfer agreement or specific regional safeguards, contact BMG before uploading that data. BMG accounts are for adults and are not directed to children.

Updates and rights

Privacy rights depend on location and the law applicable to the business. We honor applicable access, correction, deletion and opt-out rights without unlawful discrimination. You may contact your local regulator about a concern. The dated policy and consent receipts identify the version you accepted.

Optional website journey measurement

With optional analytics consent, WeWed measures public page paths, broad referral source, device category, visible-page time, scroll depth, trial-button clicks and signup milestones. It does not record form contents, passwords, payment details, session recordings or account identities in this measurement. Measurement uses a 90-day reporting window; older anonymous records are removed during collection and reporting. Exits are estimated from the last observed page after 30 minutes without activity; they are not proof that someone closed the website. Change your choice through Cookie settings.

Lead imports, forwarded email and connected CRMs

When a subscriber enables an authorized connection, we process mapped lead and contact details, event dates and locations, message content, source and external record identifiers, transfer receipts, error information and permission records to operate that subscriber's workspace. Forwarded emails may contain additional personal information; subscribers must minimize the content sent and obtain any necessary permissions. The subscriber determines the business purpose for its client records; we process them on its documented instructions, except for our own necessary account, security, support, billing and legal purposes.

Hosting and storage providers, enabled email delivery services and the subscriber's chosen CRM or automation providers receive the data needed for the requested action. Zapier or another automation provider may process data under the subscriber's separate account and terms; we do not claim to control that provider's independent retention. We do not use imported client records to market BMG or WeWed to those clients or to another subscriber, and we do not sell workspace records.

Disconnect a connection and revoke its credentials to stop further transfers. Contact us through the privacy request form for access, correction, export or deletion; we may verify identity and coordinate with the responsible subscriber. Retention follows this policy and applicable law, including necessary security, consent, suppression and dispute records. We cannot recall data already sent to an independently chosen provider. No system can guarantee perfect security, but this does not remove our applicable security or incident-notification duties. Report suspected incidents promptly to jakki@bridalmarketinggroup.com without including secrets.

Marketing review appointments and questionnaires

When you request a consultation, your contact information and questionnaire answers are saved to prepare the review. Consultation booking uses Melanie West’s Google Calendar appointment schedule; Google processes booking details under its own terms and privacy policy. A confirmed booking can be matched to your questionnaire so Melanie receives the meeting time and preparation details. This service request does not automatically opt you into unrelated promotional email.

Advertising choices and privacy rights

Optional advertising tags can disclose browsing activity and campaign events to Google or Meta for measurement and targeted advertising. Where applicable law treats this as sharing or targeted advertising, reject advertising cookies or use Global Privacy Control to opt out. We do not sell subscriber workspace records. Use Cookie settings to withdraw optional permission and the privacy request form for access, correction, deletion or other applicable rights. You may submit a request through an authorized agent where the law allows; identity and authority verification may be needed. We respond within applicable legal deadlines and do not unlawfully discriminate for exercising a right.