Privacy Policy

Last updated: April 2026

Welcome to INVITATION.LK ("we", "us", or "our"). We are a digital wedding invitation platform based in Colombo, Sri Lanka. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this policy carefully. By using INVITATION.LK, you consent to the practices described in this policy.

1. Information We Collect

We collect information that you provide directly to us when you create an account, build an invitation, or interact with our services:

  • Account Information: Your name, email address, phone number, and password when you register.
  • Wedding Details: Bride and groom names, wedding date, venue details, ceremony information, and any other content you include in your invitation.
  • Guest Data: Names, email addresses, phone numbers, and RSVP responses of guests you add to your guest list.
  • Payment Information: Billing details processed through our payment provider. We do not store credit card numbers on our servers.
  • Usage Data: Information about how you interact with our platform, including page views, features used, and device information.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our digital invitation services.
  • To create and manage your account and process your invitations.
  • To send RSVP notifications, reminders, and service-related communications.
  • To process payments and send transaction confirmations.
  • To respond to your inquiries, support requests, and feedback.
  • To monitor and analyze usage trends to improve user experience.
  • To detect, prevent, and address fraud or technical issues.

3. Data Storage and Security

Your data is stored securely in a PostgreSQL database hosted on DigitalOcean infrastructure. We implement industry-standard security measures to protect your information, including:

  • Encrypted data transmission using SSL/TLS protocols.
  • Encrypted storage for sensitive data at rest.
  • Regular security audits and updates to our infrastructure.
  • Access controls limiting data access to authorized personnel only.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use trusted third-party services to operate our platform:

  • Stripe: For secure payment processing. Stripe handles all credit card and payment data in compliance with PCI-DSS standards. See Stripe's Privacy Policy.
  • Resend: For delivering transactional emails such as RSVP notifications and account confirmations. See Resend's Privacy Policy.
  • DigitalOcean: For cloud hosting and database infrastructure.

These third parties have access to your information only to perform specific tasks on our behalf and are obligated to protect it.

5. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for authentication and session management.
  • Analytics: We collect anonymous page view data to understand how visitors use our platform and to improve our services.

We do not use third-party advertising trackers or sell your browsing data to advertisers.

6. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of any inaccurate or incomplete data.
  • Deletion: Request deletion of your account and all associated data.
  • Export: Request an export of your data in a portable format.
  • Withdraw Consent: Withdraw your consent for data processing at any time by contacting us.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data and invitation content for the duration of your active account. After your wedding date, we retain your data for an additional 6 months to allow you to access your guest list, RSVP data, and invitation analytics. After this retention period, your data will be permanently deleted unless you request an extension or export your data beforehand. You may request early deletion of your data at any time.

8. Children's Privacy

INVITATION.LK is intended for users who are at least 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Continued use of our services after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: