Privacy Policy

Devlusion Weddings is operated by Devlusion (Pvt) Ltd ("Devlusion", "we", "us"), registered in Sri Lanka. This Privacy Policy governs our public website, customer & wedding planner workspaces, digital wedding invitations, and guest RSVP portals, designed in alignment with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (PDPA).

Account Holders (Couples & Wedding Planners): Full name, email address, phone number, authentication identifiers (via Auth0 / Google Sign-In), celebration details, uploaded assets, and bank transfer verification slips.

Wedding Guests: Name, party headcount, companion names, dietary notes, guestbook wishes, and optional mobile number or email address supplied by the couple/planner or directly by the guest when completing an RSVP.

Guest data is processed strictly on behalf of the hosting couple or authorized wedding planner solely to deliver wedding invitations, record RSVP attendance, assign ballroom seating, and dispatch event updates via SMS (Text.lk gateway) and transactional email (Resend). We never sell, rent, cross-market, or share guest lists with third-party advertisers or vendors.

All traffic is encrypted in transit via TLS, session tokens are stored in HttpOnly cookies, internal microservice traffic is cryptographically signed, and tenant workspaces enforce strict role-based isolation. Public seating charts support passcode gating and redacted companion initials.

Your celebration workspace and digital invitation remain active throughout your planning journey and for 30 days following your celebration date. After 30 days, the event enters an archived 7-day grace window so you can export final guest ledgers or wishes, after which guest PII and event records are permanently purged from active production tables.

Account owners and wedding guests may request access, correction, or early deletion of their personal data at any time. Contact our Data Protection & Concierge Desk at weddings@devlusion.com or call 076 845 8449.