Privacy Policy

Mangalam Digital, Colombo, Sri Lanka, is the controller for account data and for the service itself. For the guest details a couple adds to their wedding, the couple decides who is invited and what is sent; we process that data on their behalf to run the service.

Contact: [email protected].

• Account: your email address, your name, and if you sign in with Google, your Google account email and profile picture.
• Wedding details: the couple's names, wedding date, venue and city, ceremony type, and the wording, design, theme and music you choose.
• Planning data: guests, RSVPs, budget items and payments, checklist tasks, agenda and seating.
• Uploads: invitation artwork and a short song clip, if you add them.
• Payments: the plan you chose and a payment reference. Card details are entered on PayHere's pages and never reach us.
• Technical: server logs with IP address, browser type and the pages requested, kept briefly for security and debugging.

If you received an invitation, the couple added your name and possibly your phone number so they could send you a personal link. When you open it we record your RSVP (attending or not), any note you leave, and standard technical logs. We do not create accounts for guests, and we never use guest details for marketing.

If you would like your details removed from a wedding, ask the couple, or write to us and we will help.

• To run the service: show invitations, collect RSVPs, and power the planning tools.
• To sign you in and keep your account secure.
• To send service emails: sign-in links, payment confirmation, a reminder before an unpaid workspace is removed, and a note after the wedding.
• To respond when you contact us.
• To protect the service, for example rate limiting and abuse prevention.

We do not sell personal data and we do not show advertising.

We use a small number of providers to run Mangalam. Each only receives what it needs:

• Hetzner hosts the application and database.
• Cloudflare provides DNS and protects the site; it sees traffic to our domain.
• Resend delivers our emails and receives the recipient address and message.
• Google provides optional sign-in (Google OAuth) and venue search on the map (Google Maps Places).
• PayHere processes card payments in Sri Lanka.
• WhatsApp is opened by the couple on their own device to send an invite; we only prepare the message text.

We may also disclose data where the law requires it.

We use a sign-in cookie to keep you logged in, a short-lived cookie while a demo invitation is being created before you sign in, and one to remember that you reopened a finished wedding. Your onboarding answers are saved in your browser's local storage until the wedding is created. We do not use advertising or cross-site tracking cookies.

• A workspace that is never unlocked is deleted 3 days after the account is created.
• An active wedding is kept until 7 days after the wedding day, then permanently deleted: guests, RSVPs, budget, uploads and the invitation. We keep only a minimal record of the account and that a wedding existed, for our own bookkeeping.
• Unclaimed demo drafts are deleted within a day.
• Server logs are kept for a short period, typically under 30 days.

You can view and edit your wedding data in the dashboard, export your guest list, and ask us to delete your wedding at any time. You may also ask us what data we hold about you, or to correct it. Write to [email protected] and we will reply within a reasonable time. Sri Lanka's Personal Data Protection Act gives you further rights, which we honour.

When you add guests you are sharing their personal details with us. Only add people you are genuinely inviting, message them through channels they would expect (WhatsApp from your own number, or a printed card), and remove anyone who asks. Guest phone numbers are used only to open a chat with that guest; we never contact guests ourselves.

Data travels over HTTPS and is stored in a database that only the application can reach. Sign-in is by single-use links, so there are no passwords to leak. If we ever discover a breach that affects you, we will tell you promptly.

We will update this policy as the service changes and note the date at the top. Material changes are announced by email to active couples. Our Terms of Service set out the rest of the agreement.