3ersBox

Privacy Policy

Last updated: June 3, 2026

This Privacy Policy explains how 3ersBox handles information in the 3ersBox couples app and the 3ersBox vendor app (together, the “3ersBox apps”). We have written this document to be honest and conservative. It is an operational draft and may be updated as the product evolves.

1. Who we are

3ersBox is a wedding-planning and vendor-marketplace platform focused on the Tunisian market. We operate two mobile apps: a couples app for planning weddings, and a vendor app for wedding vendors to create and manage their shop profiles on the marketplace.

Throughout this document, “we,” “us,” and “3ersBox” refer to the team operating the 3ersBox apps. “You” refers to the person using the apps, whether as a couple, a guest, or a vendor.

2. Information we collect

We collect the following categories of information, depending on how you use the apps.

  • Account data. Identifiers used to create and sign in to your account, such as your name, email address, phone number, password (stored as a hash by our authentication provider), and account role (couple, guest, or vendor).
  • Contact data. Email address, phone number, and any other contact details you provide for support, notifications, or vendor communication.
  • Wedding planning data. Information you enter to plan your wedding, including event dates, venues, budgets, planning checklists, notes, and preferences.
  • Guest list and RSVP data. Names, contact details, and RSVP responses for guests you add to your wedding. You are responsible for having permission to share guest information with us.
  • Invitation data. Content of digital invitations you create or send through the app, including text, images, and recipient lists.
  • Vendor profile data. Business name, description, categories, location, contact information, pricing ranges, availability, and other details vendors provide for their marketplace profile.
  • Vendor portfolio and media data. Photos, videos, captions, and other media that vendors upload to showcase their work.
  • Instagram and Facebook imported media data. If a vendor chooses to connect an Instagram or Facebook account, we receive data from those platforms through their official APIs. See section 4 for details.
  • AI-generated drafts and suggestions. When you use AI-assisted features, we store the inputs you provide and the drafts the system generates so you can edit and publish them.
  • Device, app, and log data. Technical information such as device model, operating system version, app version, language, approximate region, IP address, timestamps, crash reports, and basic interaction logs needed to run and debug the apps.
  • Support communications. Messages you send to us and our replies, including any screenshots or attachments you choose to share.

3. How we use information

  • Account creation and authentication. Creating your account, signing you in, recovering access, and keeping your session secure.
  • Wedding planning features. Showing your planning data, checklists, guest lists, invitations, and RSVPs in the couples app.
  • Vendor marketplace features. Displaying vendor profiles to couples, showing search results, surfacing categories, and enabling discovery.
  • Vendor onboarding and profile setup. Helping vendors fill in their profile, upload portfolio media, and complete the steps required to appear in the marketplace.
  • Social media import when authorized. When a vendor connects Instagram or Facebook, importing the data described in section 4 to pre-fill their profile.
  • AI-assisted profile generation. Generating drafts and suggestions to help vendors describe their business, write captions, or organize their portfolio. Vendors must review drafts before they are saved or published.
  • Support, safety, fraud prevention, and debugging. Responding to support requests, investigating suspicious activity, addressing abuse, and diagnosing crashes or bugs.
  • App improvement. Understanding which features are used so we can improve the apps. We do not use third-party advertising or behavioural tracking SDKs.

4. Social media import

Vendors may choose to connect an Instagram or Facebook account to help set up their vendor profile. This feature is optional. We use the official Instagram and Facebook APIs and the standard consent flows provided by those platforms. We do not scrape social platforms.

When a vendor connects an account, imported data may include:

  • basic profile details (such as username, display name, public bio);
  • captions and descriptions of selected posts;
  • metadata about media (such as type, timestamp, and dimensions);
  • thumbnails or media links provided by the platform; and
  • selected media files that the vendor chooses to import into their portfolio.

Imported data is used only to speed up vendor profile setup. Vendors can disconnect their Instagram or Facebook account at any time and can request deletion of imported data and connection tokens. See our Data Deletion Instructions for details.

5. AI-assisted features

Some features use AI models to generate drafts, summaries, or suggestions — for example, draft vendor descriptions, draft captions, or suggested categories.

  • AI outputs are drafts only. They are not final published content.
  • Vendors and users must review AI drafts before saving or publishing them.
  • AI outputs may be inaccurate, incomplete, or unsuitable for your context.
  • You remain responsible for the content you publish through the 3ersBox apps.

6. Sharing of information

We share information only as described below.

  • Backend and infrastructure providers. We use Supabase for backend services such as database storage and authentication. Information you provide to the apps is stored and processed through this infrastructure.
  • Service providers. We may use additional providers for hosting, file storage, transactional email, crash reporting, or basic analytics. We only share what is needed for the provider to perform its service.
  • App stores and platforms. When required to publish, distribute, or support the apps on Google Play, the Apple App Store, or the Meta (Facebook/Instagram) developer platforms.
  • Other users. Information you choose to make visible through the product features — for example, a vendor’s public profile is visible to couples, and information you enter for a guest may be visible to others involved in planning that wedding.
  • Legal and safety. When we believe in good faith that disclosure is necessary to comply with applicable law, respond to a valid legal request, enforce our Terms, or protect the rights, safety, and property of users or the public.

We do not sell personal information.

7. Data storage and security

We apply reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include authentication controls, access restrictions, and the use of established backend providers.

No online service is 100% secure. We cannot guarantee absolute security of information transmitted to or stored by the 3ersBox apps. You are responsible for keeping your account credentials confidential.

8. Data retention

We keep information for as long as your account is active, as needed to provide the apps and the marketplace, and as needed for legal, security, fraud-prevention, dispute, backup, or transaction record purposes. When information is no longer needed for these purposes, we delete it or take steps to anonymize it within a reasonable time.

Imported Instagram and Facebook data is kept while the connection is active. If a vendor disconnects, we take steps to delete connection tokens and the related imported data within a reasonable time, subject to the retention exceptions described in our Data Deletion Instructions.

9. User choices and deletion requests

You can:

  • edit or remove information you have entered into your profile or planning tools;
  • disconnect Instagram or Facebook from the vendor app at any time;
  • contact us to request deletion of your account or of imported social-media data.

To make a deletion request, please follow our Data Deletion Instructions. We may need to verify that the request comes from the account holder before acting on it.

10. Children and age limits

The 3ersBox apps are intended for adults using them for wedding planning or vendor activity. They are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can take appropriate steps.

11. International processing

We operate from Tunisia and may use service providers located in other countries. Information you provide may be stored or processed outside your country of residence. By using the 3ersBox apps, you understand that information may be transferred to and processed in jurisdictions other than your own.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. If the changes are significant, we will take reasonable steps to make you aware of them through the apps or by other appropriate means.

13. Contact

If you have questions about this policy or about how your information is handled, please contact us at support@3ersbox.com.