Privacy Policy

Duqit Labs ("we", "us") operates duqit.com, including our digital invitation service and business POS platform. This policy explains what we collect, why, and the choices you have. We are based in Sri Lanka and you can reach us any time at contact@duqit.com.

What we collect

• Account data — your email address, name or business name, chosen apps and subscription status, currency and language preference, and a hashed password (never the password itself). If you sign in with Google or Facebook, we receive your name, email address, and account identifier from that provider; we never receive your social media password.
• Invitation data — the event details you enter (names, dates, venues, messages) and your guest list (guest names, optional WhatsApp numbers, and their RSVP responses). Each guest link is protected by an unguessable token, is never listed publicly, and is excluded from search engines.
• POS data — for business accounts: your inventory, customers, and invoices. This data belongs to you and is visible only to your account (and to us, for support and operations).
• Leads & messages — what you submit through our contact and booking forms.
• Technical data — standard server logs, and analytics via Google Analytics (aggregate usage). We use Google reCAPTCHA to protect our forms; your use of it is subject to Google's privacy policy.

Cookies

We use a session cookie to keep you signed in, and small preference cookies for language and light/dark theme. Google Analytics and reCAPTCHA may set their own cookies.

How we use data

To provide the services you signed up for — rendering and delivering your invitations, tracking RSVPs, running your POS — and to respond to enquiries, secure the platform, and improve it. We do not sell your data, and we do not use your guests' contact details for anything except delivering the invitation you created.

Sharing

We share data only with the processors needed to run the service: our hosting provider, our email delivery provider (for transactional email), and Google/Meta when you choose to sign in with them. Each processes data under its own privacy policy.

Retention & deletion

We keep your data while your account is active. You can request deletion of your account and all associated data at any time — see our data deletion instructions. We complete deletion requests within 30 days.

Your rights

You may request a copy of the data we hold about you, correct it, or have it deleted. Email contact@duqit.com from your registered address and we will act on it promptly.

Changes

If we change this policy we will update this page and the date above. Significant changes will be announced to account holders by email.