Last updated: Sunday, 4 October 2026
Privacy policy
OyathEnna is run by OyathEnna. This policy explains what we collect when you use OyathEnna, why, who helps us run the service, and the choices you have. We follow Sri Lanka's Personal Data Protection Act, No. 9 of 2022.
What we collect
- Your account: your name, email address, mobile number and the language you use. If you sign in with Google, we receive your name and email from Google.
- Your invitations: names, dates, venues, programme, photos, music choices and everything else you add to an invitation, plus your budget and planning notes.
- Your guests: the names, mobile numbers, email addresses, groups and languages you add or import, and what your guests send back: their reply, number of people, children, meal choices, dietary notes, messages, photos they share and when they arrive at the door.
- Payments: the plan you bought, amounts, discount codes and receipts. Card payments are handled by PayHere; we never see or store your card number. For bank transfers we keep the slip you upload.
- Technical information: when invitations are opened, delivery status of messages we send for you, and basic logs needed to keep the service secure.
Why we use it
- To run the service: show invitations, record replies, send messages you ask us to send, and process payments.
- To keep accounts and payments safe, prevent misuse, and meet our legal and accounting duties.
- To support you when you contact us.
- We don't sell personal information, and we don't show advertising.
Your guests' information
- When you add guests, you are responsible for having their permission to send them an invitation and messages.
- Each invitation link is private and is not shown on Google. Only you and the co-hosts you add can see your guest list.
- A guest can ask you, or us, to remove their number or details. You can delete guests or a whole invitation at any time.
Who helps us run OyathEnna
- Supabase (database, file storage and sign-in) and Vercel (website hosting).
- PayHere (card and mobile wallet payments).
- Meta / WhatsApp (messages sent from our WhatsApp number when you choose automatic sending).
- Resend (emails such as invitations, receipts and alerts) and Google (if you choose to sign in with Google).
- These services process information only to provide their part of the service. Some may store data outside Sri Lanka, with safeguards in place.
How long we keep it
- We keep your account and invitations until you delete them or close your account.
- Payment records and receipts are kept as long as the law requires for accounting, without your other details.
- Photos and guest data are removed when you delete the invitation.
Your choices and rights
- You can see and change your details in My account, and download or delete your guest lists.
- In My account you can ask for a copy of your data or ask us to delete your account. We reply within 30 days.
- You can also contact us at hello@oyathenna.lk about any privacy question.
Cookies
We use only the cookies needed to keep you signed in and to remember your language. We don't use advertising or tracking cookies.
Children
OyathEnna is for adults planning events. Children may appear as guests on an invitation that an adult manages.
Changes and contact
If we change this policy we'll update the date above, and tell you about important changes. Questions: hello@oyathenna.lk · +94 71 97 97 497 · Sri Lanka.