Privacy Policy

1. Data collection

We collect information to provide a secure environment for our software and identity services. This includes:

• Identity data: Name, email address, and phone number provided during account registration or verification.
• Technical data: IP addresses, browser types, device information, and session identifiers used for security monitoring and diagnostics.
• Payment information: Online payments may be processed by third-party providers such as PayHere. We do not store full card numbers on our own servers; payment data is handled according to the processor’s policies.

2. Technical security measures

We apply industry-standard protections appropriate to our platform:

• Encryption in transit: Data sent between your browser and our services is protected with TLS (HTTPS).
• Password security: Passwords are not stored in plain text; we use strong one-way hashing (for example PBKDF2-based schemes via ASP.NET Identity).
• Sessions: Authentication sessions may use encrypted server-side storage; cookies typically carry opaque references rather than sensitive payloads.

3. Your rights

Depending on applicable law (including Sri Lanka’s data protection framework and, where relevant, GDPR), you may have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact contact@webjala.com.

4. Related documents

Please also read our Terms & Conditions and Refund & Cancellation policy.