What we collect and why
We store account names, email addresses and securely hashed passwords to provide your workspace. We store submitted public website URLs and technical findings to provide reports. Enquiry details are used to respond to your request and organize consulting work.
Cookies and access
Essential HTTP-only cookies maintain your login for up to seven days and link anonymous scans to this browser for up to 30 days. We do not use advertising trackers. Administrator changes are logged for accountability.
Retention and deletion
Unclaimed anonymous reports are scheduled for deletion after 30 days while the worker is running. Account reports remain until deleted by the account owner or processed through a privacy request. Enquiries and audit records are retained pending a documented operational retention policy. Contact us to request account deletion, correction, access or a copy of your information.
External services and international processing
The scanner contacts the public website you submit. If configured, Google PageSpeed Insights receives that public URL to perform a mobile measurement. No AI provider, payment processor or marketing analytics provider receives your account data in this Stage 1 release. Infrastructure and any future providers may process information outside Sri Lanka; provider locations and transfer arrangements require review before sensitive data is collected.
Security and limitations
Account sessions, report isolation, administrator permissions and premium entitlements are enforced on the server. The scanner blocks private network destinations. No system is risk-free. Do not submit passwords, private documents, personal financial records, bank details or sensitive personal data in staging.
Your privacy requests
Use the contact form and select “Privacy Request”. We will need to verify your identity before changing or disclosing account records. The applicable legal entity, responsible contact, statutory response periods and processing grounds must be finalized through local legal review before public launch.
Submit a privacy request