Invited
Legal

Privacy Policy

Last updated · 17 May 2026

In plain English

The plain-English version — written first, reviewed before launch.

Privacy·Terms

Invited. is built by a one-person studio in Colombo. We take your data seriously, partly because we’re also using this product ourselves.

What we collect

When you make an invitation, we collect:

  • Your account email + name (Supabase Auth handles this).
  • The invitation details you enter — names, dates, venue, gallery photos, gift instructions.
  • RSVP responses from your guests (their name, optional email or phone number, and whether they’re coming).
  • Basic analytics about how the app is used (PostHog, cookie-light, no ad-tracking or cross-site tracking).

What we don’t do

  • We never sell your data to anyone.
  • We never email you marketing without explicit opt-in (we ask once during signup).
  • We don’t share guest data with anyone except the services that keep Invited. running — payment processing, email and SMS delivery, and analytics.

Where it lives

Your data sits on Supabase (Singapore region, Postgres + storage) and is replicated for backup. Payments go through PayHere — your card number never touches our servers.

How long we keep it

  • Invitations and RSVPs stay until you delete the invitation.
  • Guest phone numbers (when provided) auto-delete 90 days after the event date.
  • Uploaded photos are deleted when the invitation is deleted.
  • Deleting your account takes all your data offline immediately, with a 30-day window to restore it. After that it’s queued for permanent erasure.

Your rights

You can:

  • Export everything we have on you (GDPR-style).
  • Delete your account anytime — it goes offline right away, with 30 days to change your mind.
  • See exactly what data we have via your dashboard.

Cookies

We use minimal cookies for authentication and analytics. EU visitors see a cookie banner. We don’t use ad-tracking cookies at all.

Sri Lanka PDPA

We comply with the Sri Lanka Personal Data Protection Act (2022). If you have a complaint, email privacy@invited.lk first — we’ll respond within 7 days. If you’re not happy with our reply, you can escalate to the Data Protection Authority.

Contact

For privacy questions: privacy@invited.lk
For everything else: hello@invited.lk

Privacy — Invited.