1. Privacy Commitment & Scope
At WeddingSync Technologies (Pvt) Ltd ("WeddingSync", "we", "us", or "our"), we treat your wedding celebrations and personal memories with the highest degree of confidentiality and technical security.
This Privacy Policy explains how personal data is collected, stored, protected, and transferred when you visit our website, register a couple workspace account, publish your couple website, manage wedding guests and seating plans, or RSVP to an invitation.
2. Categories of Information We Collect
We collect only the minimum information necessary to provide seamless wedding planning services:
| Category | Specific Data Collected | Purpose |
|---|---|---|
| Couple Profile | Bride & Groom first and last names, email address, mobile phone numbers, wedding date, wedding venue, and ceremony tradition (Poruwa or Church). | Account creation, countdown management, workspace authentication, and communication. |
| Public Wedding Site | Personalized wedding URL slug (e.g. dilini-kasun), couple story bios, photos, wedding schedule, and venue directions. |
Publishing the couple's digital invitation and wedding website for invited guests. |
| Guest Lists & Seating | Guest first and last names, telephone numbers, family/group affiliations, attendance status (Attending, Declined, Pending), table allocations, meal choices, and dietary constraints. | Table seating calculations, catering headcount estimates, and WhatsApp/SMS invitation dispatches. |
| RSVP Submissions | Guest name, attending status, plus-one headcount, meal selection, and personalized blessing/message. | Real-time synchronization into the couple's dashboard statistics. |
| Payment & Slip Verification | Transaction reference numbers, payment gateway tokens, cryptographic SHA-256 slip fingerprints, and digital photos of Commercial Bank deposit receipts. | Verification of paid package upgrades and generation of official tax invoices. |
3. How We Process & Use Your Information
WeddingSync processes your personal data on the lawful basis of contract performance and legitimate interests:
- To provide, operate, and maintain your private wedding planning workspace;
- To dynamically compute RSVP percentages, pending reminders, dietary allocations, and table capacities;
- To generate pre-formatted, personalized WhatsApp and SMS invitation messages;
- To verify bank deposit slips and activate lifetime package upgrades;
- To protect against fraudulent activities, security intrusions, or unauthorized platform usage;
- To provide customer support and notify you of critical workspace updates.
4. Automated Photo Optimization & Storage Policy (< 500KB)
To ensure lightning-fast website performance on mobile connections throughout Sri Lanka, WeddingSync employs an advanced client-side compression engine:
- Automatic 500KB Compression: When you upload a bank deposit slip or photo, our software automatically resizes, optimizes, and compresses the image payload below 500KB prior to cloud transmission.
- Content Hashing & SHA-256 Tamper Protection: Each uploaded image is cryptographically digested using SHA-256, generating a permanent digital fingerprint to prevent duplication and document tampering.
- Security of Financial Slips: Bank deposit receipts are stored in access-restricted storage buckets and are reviewed only by authorized financial verification administrators. Once verified, images are archived securely.
- Couple Gallery Images: Photos published to your wedding website are served over encrypted Content Delivery Networks (CDN) to ensure rapid loading for wedding guests.
5. Cloud Infrastructure & Third-Party Services
WeddingSync partners with industry-leading infrastructure providers under strict Data Processing Agreements:
- Google Firebase Cloud (Project:
weddingsync-b3a74): Used for secure cloud storage of optimized photos, real-time Firestore database synchronization of RSVP submissions, and Firebase Authentication. - Google Analytics (Measurement ID:
G-RESF31EHG7): Aggregated, anonymized telemetry tracking to monitor website performance, error rates, and user engagement metrics. - Payment Processors (PayHere Sri Lanka & Commercial Bank): Credit and debit card transactions are handled directly through PCI-DSS Level 1 compliant financial institutions. WeddingSync never stores complete card numbers or CVV codes on our servers.
6. Guest Privacy & Anti-Spam Safeguards
Your wedding guests' privacy is paramount:
- We never send promotional advertising, sales pitches, or unsolicited emails to phone numbers or emails imported into your guest list.
- WhatsApp invitations are dispatched directly through your personal device's WhatsApp application using official WhatsApp click-to-chat API links.
- Guests submitting an RSVP see only their own invitation details and cannot view other guests' personal information, table numbers, or responses without authorization.
8. Data Retention & Automatic Archival
We retain your personal data for as long as your wedding workspace remains active:
- Active Preparation: Workspace data is retained during the entire wedding planning lifecycle.
- Post-Wedding Period: To allow couples to download guest rosters, access tax receipts, and preserve wedding photos, public website links remain accessible for a standard period of twelve (12) months following the wedding date.
- Account Deletion: You may request full permanent deletion of your account and all associated records at any time.
9. Your Data Protection Rights
Under the Sri Lanka Personal Data Protection Act No. 9 of 2022 and international data protection standards, you have the following rights:
- Right to Access: You can review all personal information stored in your account through your workspace settings.
- Right to Export (Data Portability): You may export your complete guest roster, table assignments, and RSVP statuses into a standardized CSV spreadsheet at any time via the Guest List module.
- Right to Rectification: You may update or correct inaccurate details regarding bride/groom names, phone numbers, wedding dates, or venue locations at any time.
- Right to Erasure (Right to be Forgotten): You may request complete and permanent deletion of your workspace, wedding website, and guest records by contacting our Data Protection Officer.
10. Security Safeguards & Encryption
We employ enterprise-grade security protocols to protect your personal information:
- Transport Layer Security (TLS/HTTPS): All data transmitted between your browser and our servers is encrypted using 256-bit TLS protocols.
- Database Protection: User passwords are encrypted with robust cryptographic hashing.
- Access Controls: Administrative access to couple accounts and payment slips is strictly restricted to verified personnel with multi-factor authentication.
11. Children's Privacy
WeddingSync services are intended exclusively for adults aged 18 and older. While guest lists may include children (e.g. flower girls, page boys, or family members), their information must be submitted exclusively by a parent or legal guardian for event seating and meal headcount purposes.
12. Privacy Inquiries & Data Protection Officer
If you have questions, feedback, or wish to exercise any of your data protection rights, please contact our appointed Data Protection Officer:
WeddingSync Technologies (Pvt) Ltd
Level 14, World Trade Center, Echelon Square, Colombo 01, Sri Lanka
📧 Direct Privacy Email: privacy@weddingsync.lk
📞 General Support: 078 300 3001 / 070 381 4317