1. Who we are

Wedly is operated by Hydra Works in Malaysia. This policy explains how we collect, use, store, and share personal information when you visit Wedly, create an account or invitation, contact us, or respond to an invitation as a guest.

Wedding hosts also make decisions about the guest information they provide and the invitations they share. If you are a guest, your host can answer questions about why you were invited and how they use your response.

2. Information we collect

The information we handle depends on how you use Wedly:

• Account information: your name, email address, profile picture, Google account identifier, email verification status, and authentication records. We also store any phone number you provide and your language preference.
• Wedding and invitation details: the names, date, time, venue, contact details, text, settings, and media supplied to create an invitation.
• Guest information: names, phone numbers, guest categories, host notes, invitation links, attendance responses, messages, and response history.
• Activity information: sign-in records, invitation creation and publication activity, and recorded invitation sending, opening, and RSVP times. Opening a WhatsApp sharing link is recorded separately from a confirmed guest response.
• Purchase information: order and payment references, amounts, currencies, payment status, and refund records. Payment details entered in Stripe checkout are handled by Stripe; Wedly receives the information needed to manage the purchase.
• Support information: messages you exchange with our support team and the account or invitation details needed to help you.

3. Signing in with Google

Google provides your basic account profile, including your name, email address, profile picture, and account identifier, so we can create and authenticate your Wedly account. Wedly does not receive your Google password. Our Google sign-in requests basic identity permissions, not access to your Gmail messages, Google Drive files, or Google contacts.

We use this information to recognize your account, maintain sign-in sessions, display your profile, and provide account support. You can review or remove Wedly’s access in your Google Account settings. Removing Google access does not itself delete information already stored by Wedly; contact us to request deletion.

Wedly’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

• Manage connections to your Google Account
• Google API Services User Data Policy

4. How we use information

We use information to operate your account; create, display, and share invitations; organize guest lists and responses; process purchases; answer support requests; and maintain the security and reliability of Wedly. Activity records help us understand the status of an account or invitation, resolve problems, and investigate misuse.

Providing information needed for a feature is optional, but the feature may not work without it. For example, we need Google identity information to create a signed-in account and an attendance response to record an RSVP. Hosts should only provide guest information they are entitled to use and should avoid adding unnecessary sensitive information to notes or messages.

5. Who can see information

Wedding hosts can see and manage the guest information, RSVP responses, and messages associated with their invitations. People who receive or obtain an invitation link may view the information published in that invitation. Treat invitation links and uploaded media links as shareable, and avoid publishing information you would not want recipients to pass on.

Authorized Hydra Works staff may access information when needed to provide support, operate the service, handle purchases, or investigate security issues. Service providers involved in hosting, storage, authentication, or payment processing may handle information needed for those functions. Information may also be disclosed when required by law or to protect users, the service, or legal rights.

Google provides sign-in and, where used, venue search and map services. Stripe processes payments. If you choose to share an invitation through WhatsApp or open another external service, information you send to that service is handled under its own privacy terms.

Service providers may process information in countries outside Malaysia. You can contact us with questions about the providers involved in handling your information.

6. Website and product analytics

We use Google Analytics to understand traffic, the designs visitors browse, time spent actively viewing designs, and progress through sign-in, invitation setup, editing, and checkout. These records include browser and session identifiers, language, device information, marketing campaign labels, and design identifiers. We use them to improve Wedly and understand where visitors encounter difficulties.

Our analytics events do not include names, email addresses, invitation wording, guest information, private invitation links, or form contents. We do not run the analytics tag on guest invitation or admin pages. Google Signals and advertising personalization are disabled. We honor browser Do Not Track and Global Privacy Control signals for new analytics collection.

Analytics uses Google Analytics cookies. We also use browser session storage to avoid counting the same setup or checkout completion again when a page is refreshed in the same tab. You can manage cookies in your browser or use Google’s Analytics opt-out browser add-on.

• Google Analytics opt-out browser add-on

7. Cookies and browser storage

Wedly uses cookies and similar browser storage to support sign-in, protect authentication requests, remember the language used during sign-in, and save interface preferences such as recently used design colors or a dismissed notice. These are separate from the guest and account records stored by the service.

You can manage cookies and local storage in your browser. Blocking or clearing them may sign you out or reset preferences, and may prevent some features from working.

8. Storage and retention

We retain information for the purposes described in this policy, including providing your account and invitations, maintaining purchase records, responding to support requests, and addressing security issues or disputes. Retention depends on the information involved, the status of your account and invitations, and applicable recordkeeping requirements.

A deletion request may not result in every record being erased immediately. Some information may need to be retained for legal, payment, security, or dispute-related reasons, and copies in backups may remain until those backups are replaced or expire. Contact us to discuss what can be deleted and any information that needs to be retained.

9. Your choices and deletion requests

You can contact us to request access to or correction of your information, ask about its use, or request deletion of your account or guest data. Send your request to the support email below. Include the email address associated with your account or enough information to identify the relevant invitation; do not send passwords or payment-card details.

We may need to verify your identity and your relationship to an account or invitation before acting on a request. If you are a guest, you can also ask the wedding host to correct or remove the information they manage. Deleting account or invitation information can affect access to invitations and guest responses.

10. Changes to this policy

We may update this policy as the service or our practices change. The date at the top identifies the latest version. Where a change requires additional notice or a choice under applicable law, we will provide it.

11. Contact Hydra Works

For privacy questions, account or guest-data deletion, and support, contact Hydra Works, the operator of Wedly in Malaysia.