Legal
Privacy Policy
investing.lk — Last updated: May 2026 · Version v1.0 (2026-05)
At a glance
We collect only what we need to verify identity, review businesses, and connect verified users. We do not sell your personal data, do not run third-party advertising trackers, and keep verification documents private and access-controlled.
1. Introduction
investing.lk is committed to protecting user privacy. This policy explains what information we collect, how we use it, and your rights regarding your personal data. By using investing.lk you agree to the practices described here and in our Terms of Service.
2. Information We Collect
- Account information — full name, email address, and password.
- Profile information — investment preferences, capital range, sector interests for investors; business details, funding goals, and company registration for founders.
- Verification documents — government-issued ID, proof of address, source of funds, business registration certificates, and financial statements used solely for identity and compliance verification.
- Usage data — pages visited and actions taken.
- Communications — messages sent through the platform inbox between matched users.
3. How We Use Your Information
To verify identity and eligibility, review and approve listings and profiles, facilitate introductions and matches, send account and match notifications, maintain platform security, and comply with applicable laws including the Personal Data Protection Act of Sri Lanka.
4. Who Sees Your Information
Verification documents are visible only to the investing.lk admin review team. Profile information is visible to other verified users according to role. Private messages are visible only to the matched parties. We do not sell, rent, or share personal information with third parties for marketing purposes.
5. Data Storage and Security
Data is stored securely with encryption at rest and in transit. Verification documents are stored privately and are not accessible to other users. We implement industry-standard security measures.
6. Data Retention
We retain account data while your account is active. Verification documents are retained for compliance purposes. You may request deletion by contacting us.
7. Your Rights
Under the Personal Data Protection Act of Sri Lanka, you have the right to access, correct, or delete your personal data, withdraw consent, and lodge a complaint with the relevant authority. Contact us at info@investing.lk to exercise these rights.
9. Third-Party Services
We use Supabase for database and authentication infrastructure and Google OAuth for optional sign-in. Each operates under its own privacy policy.
10. Children
investing.lk is not intended for users under 18. We do not knowingly collect information from minors.
11. Changes to This Policy
We may update this policy and will notify you of material changes through the platform.
12. Contact
For privacy questions or to exercise your data rights, contact us at info@investing.lk.
By using investing.lk you confirm that you understand how we handle your data as described above.