Privacy policy

How couples and their guests are looked after on Forever Stories.

Last updated date of publication

1. Who we are

   Forever Stories is operated by registered business name, registration number number, of registered address, Sri Lanka (“we”, “us”). You can reach us at privacy email or on WhatsApp at +94 77 832 1153.

2. The two kinds of people whose information we hold

   • Couples who create a wedding website with us, and anyone they add to help manage it.
   • Guests whose names and contact numbers a couple adds, or who reply to an invitation or share photographs.

   For guest details, the couple decides who is invited and what is sent. We process those details on the couple’s behalf, only to run their wedding website. Couples confirm that they have their guests’ permission to add them.

3. What we collect

   • Account: your mobile number (used to sign in with a one-time code), your names, and your email address if you give one for receipts.
   • Wedding details: names, dates, venues, your story, photographs, and the choices you make in the editor.
   • Guest list: guest names, phone numbers, which events they are invited to, and the number of seats for each.
   • Replies: attendance, head count, dietary needs and any note a guest writes.
   • Memories: photographs and videos guests or your photographer upload, if you choose the Memories add-on.
   • Payments: the amount, date and result of a payment. Card details are entered on Dialog Genie’s secure page; we never see or store your card number.
   • Technical: basic records such as when an invitation link was opened, the kind of device, and error reports, so we can keep the service working.

4. How we use it

   • To build and show your wedding website, and to send personal invitation links when you ask us to.
   • To sign you in, by sending a one-time code to your mobile number.
   • To show you replies, head counts and who has not opened their invitation.
   • To take payment and send you a receipt.
   • To answer your questions, prevent misuse, and meet our legal obligations.

   We do not sell personal information, we do not use guest details for our own marketing, and we do not show advertising on invitations.

5. Who can see what

   • A guest sees only their own invitation, their own reply and, with Memories, only the photographs they uploaded themselves.
   • The couple sees their whole guest list, every reply and every photograph shared with them.
   • A photographer invited by the couple can upload to that wedding only.
   • Our staff access wedding information only when needed to support you or keep the service safe, and that access is recorded.

6. Services that help us run Forever Stories

   We use carefully chosen providers, each receiving only what it needs:

   • Supabase (database and sign-in), Netlify (website hosting and scheduled tasks), DigitalOcean (photograph and video storage).
   • text.lk (sending sign-in codes by SMS) and Resend (email receipts). Invitation messages are sent by the couple from their own WhatsApp; we prepare the message and link, and WhatsApp’s own terms apply to the sending.
   • Dialog Genie (card payments).

   Some of these providers store information outside Sri Lanka. Where they do, we rely on their contractual and security commitments to protect it to the standard the Personal Data Protection Act requires.

7. How long we keep it

   • Your wedding website stays online until number months after the wedding date, then it is taken offline.
   • Memories photographs and videos are kept until number months after the upload window closes, so you have time to download the album. We will remind you before they are deleted.
   • Payment records are kept for as long as tax law requires.
   • You can ask us to delete your wedding website and guest list earlier at any time.

8. Your choices and rights

   Under the Personal Data Protection Act you can ask to see the information we hold about you, correct it, have it deleted, or object to how it is used. Couples can download or delete their guest list and photographs from the dashboard. Guests can ask the couple, or contact us directly, to remove their details. We reply within number working days.

9. Keeping it safe

   Information travels over encrypted connections, access rules in the database keep each guest’s information separate, and photographs are only reachable through short-lived private links. No system is perfectly secure, and if a breach affects you we will tell you and the authorities as the law requires.

10. Children

    Accounts are for adults aged 18 or over. Guests of any age may appear on a guest list added by the couple.

11. Changes

    If we change this policy in a way that matters, we will update the date above and tell couples with an active wedding website.