Privacy Policy

Information we collect

Account information

We collect your name, email address, encrypted password credentials, or information received when you choose Google sign-in.

Invitation content

We store the names, event dates and times, venue details, maps, contact details, text, music, photographs, generated artwork, and other content you add to an invitation.

RSVP information

When a guest responds, we may collect their name, attendance choice, guest count, message, response time, and a browser-generated identifier used to update the response.

Payment and support information

We receive payment status, order or transaction references, amount, and information you provide when requesting support. PayHere processes payment card details. InviteBloom does not receive or store your complete card number or card security code.

Device and service information

Our systems may process IP address, browser and device information, timestamps, security logs, and essential cookies or local storage needed for sign-in, saved drafts, RSVP updates, fraud prevention, and reliable operation.

How we use information

• create accounts and authenticate users;
• save, personalize, publish, and host digital invitations;
• generate requested caricatures from uploaded couple photographs;
• collect and show RSVP responses to the invitation creator;
• process payments, confirm publication, and provide customer support;
• secure the service, prevent misuse, troubleshoot errors, and meet legal obligations; and
• improve our templates and service using aggregated or de-identified information where appropriate.

AI image generation

If a creator chooses caricature generation, the uploaded bride and groom photographs and the generation instructions are sent to our AI service provider to create the requested image. Do not upload a person's photograph without their permission. AI results may be imperfect, so creators should review the result before publishing.

When we share information

We do not sell personal information. We may share only the information needed with service providers that help us operate InviteBloom, including:

• PayHere and participating financial institutions for payment processing, verification, refunds, and fraud prevention;
• Google when you choose Google authentication;
• OpenAI when you request AI caricature generation;
• hosting, database, file storage, communications, and security providers; and
• authorities or professional advisers where required by law or reasonably necessary to protect users, InviteBloom, or the public.

Some providers may process information outside Sri Lanka, subject to their safeguards and applicable data-protection requirements.

Public invitations and creator responsibility

Invitation creators decide what content to publish and who receives the invitation link. Published content may include names, photographs, event times, venue details, maps, and contact links. Guests should avoid forwarding a private event link without the creator's permission.

The creator can see RSVP information submitted for their invitation. Creators must use guest information only to manage their event and must not misuse, sell, or disclose it for unrelated purposes.

Retention and security

We retain personal information only for as long as reasonably needed to provide the service, maintain transaction and legal records, resolve disputes, and protect the platform. Different records may be kept for different periods. You may ask us to remove an unpublished invitation, account information, source photograph, or RSVP record, subject to legal and operational retention requirements.

We use reasonable technical and organizational safeguards, including restricted access, password hashing, and secure connections. No online system can guarantee absolute security.

Your choices and rights

Subject to applicable law, you may ask to access, correct, update, erase, or restrict the use of your personal data, or object to certain processing. You may also withdraw consent where processing depends on consent. We may need to verify your identity before completing a request.

Creators can update invitation information from their account. Guests may contact the invitation creator or InviteBloom about an RSVP response. You may also complain to the Data Protection Authority of Sri Lanka.

Children

InviteBloom is not intended for account holders under 18 years of age. Do not submit a child's personal information or photograph unless you are their parent or legal guardian, or have appropriate permission.

Policy changes and contact

We may update this policy when our service or legal duties change. The revised date will appear at the top of this page. For privacy questions or requests, call or WhatsApp +94 78 464 2025.