Privacy Policy

This policy explains what personal data CEYRES collects, how we collect it, why we use it, who we share it with, how long we keep it and what choices you have. It covers the CEYRES app for iPhone and Android, ordering at a restaurant table with a CEYRES QR code, and our websites. If anything is unclear, email us at [email protected].

1. Who we are

CEYRES is run by IPERLY (PVT) LTD, a private limited company registered in Sri Lanka. Its company registration number is PV00262623. IPERLY (PVT) LTD decides how and why your personal data is used, and is responsible for it under Sri Lankan law. In this policy, "CEYRES", "we", "us" and "our" mean IPERLY (PVT) LTD.

• Registered office: No. 166/1 Aluththota, Waikkala, Sri Lanka.
• Email: [email protected]. You can also contact us in the app under Profile → Help & Support.
• Data Protection Officer: email [email protected] and write "Attention: Data Protection Officer" in the subject line.

2. Who this policy covers

• Part A is for customers. It covers anyone who uses the CEYRES app, including people who browse without an account. It also covers anyone who orders at a restaurant table through qr.ceyres.com and anyone who uses our websites. It also covers people whose details a customer gives us, such as the receiver of a parcel or the recipient of a gift card.
• Part B is for businesses that subscribe to CEYRES, and for their owners and staff.
• Part C applies to everyone. It covers the protection we require from others, where data is stored, how we protect it, legal requests, data breaches, changes to this policy and how to contact us.

The restaurants, shops and service providers you order from through CEYRES are independent businesses. Each one receives the details it needs to serve you (section 13).

Part A: Customers

3. Information you give us

• Phone number (required). Your phone number identifies your account. We confirm it by sending you a one-time code by WhatsApp or SMS.
• PIN (required). You choose a 6-digit PIN to sign in. We store it only as a hash. A hash is a scrambled form that cannot be turned back into your PIN. We also keep the hashes of your earlier PINs, so that you cannot reuse one.
• Name (optional). If you do not give a name, the business you order from sees your phone number instead.
• Email address (optional). We use it to send email receipts. We also use it as a second check when you reset your PIN yourself.
• Gender and birthday (optional). We keep them on your profile.
• Profile photo (optional). You take it with your camera or choose it from your photos.
• Orders and bookings. What you order, how many, your notes to the business, prices, discounts and promo codes, your delivery or pickup time, your table number, and the order's status and its history.
• Parcels. The pickup and delivery addresses, the parcel type, its weight and description, the vehicle you choose and your notes for the driver.
• Addresses. Delivery addresses and saved addresses, with the point you choose on the map. We need an address for delivery orders and parcels.
• Reviews and ratings. Star ratings and written reviews of businesses, and star ratings and comments about parcel deliveries. If you attach a photo while writing a review, the photo is sent to our server, but it is not published with your review.
• Messages. What you write in AI Chat, support tickets, refund requests, chats with your driver and messages about a booking, with any photos you attach.
• Points and rewards. Your CEYRES Points balance and its history (top-ups, payments, refunds and rewards), loyalty points, your referral code and the people who used it, and gift cards you buy or redeem.
• Your requests to us. Requests to download your data or delete your account, with any reason you give.
• Card payments. See section 4.

If you do not give information marked "required", you cannot use the feature that needs it.

Details about other people. For a parcel, you give us the receiver's name, phone number and address. For a gift card, you give us the recipient's mobile number and, if you wish, a message. Give us another person's details only if they agree.

If someone sends you a parcel or a gift card. We hold the details the sender gave us. For a parcel, the driver uses them to deliver it. For a gift card, we send you the code by SMS, with the sender's first name and the amount. When a driver accepts the parcel, we may send you an SMS with a tracking link (section 13). You have the rights in section 16 over this data.

4. Card payments

Card payments go through Commercial Bank of Ceylon (ComBank), using Mastercard Payment Gateway Services. This is the only card payment gateway CEYRES uses.

• You type your card number, expiry date and security code into fields that the gateway provides inside a CEYRES payment screen. These details go straight to the gateway. CEYRES never receives them.
• The payment screen also asks for the name on your card. That name stays on your phone. It is not sent to CEYRES.
• Your bank checks every card payment with 3-D Secure, including payments with a saved card.

For each card payment, we keep the gateway's response. It includes:

• your card number with all digits hidden except the first six and the last four;
• the card's expiry date, its brand and its type (for example, debit or credit);
• the amount, the currency, the date and the order reference;
• the approval code and the result of the 3-D Secure check;
• the IP address and the app or browser details of the payment request.

Saved cards. Saving a card is optional. The box is not ticked unless you tick it. If you save a card, the gateway gives us a token to use in place of the card number. We keep that token with the card brand, the last four digits and the expiry month and year. We also record that you agreed to the saved-card terms, when you agreed, which version you agreed to and your IP address. You can delete a saved card at any time (section 16).

5. Information we collect automatically

• Location. If you allow it, the app reads your phone's precise location once, while you are using the app. This happens when you open the map, the nearby places list, the services list, a parcel screen or a restaurant's or shop's branch list. It also happens when you tap "use current location". The app never reads your location in the background. You can always type an address or choose a point on the map instead. When the app sends your location to our servers, for example to find places near you, we use it only for that request. We do not save your phone's location to your profile. It does appear in our server logs (see below). The app keeps the last place you chose on your phone.
• Device information. Your phone's make and model, its operating system version, the app version, the IP address you sign in from and the country your connection comes from. The app also makes a device code by combining your phone's built-in ID with a random value. Your phone's built-in ID never leaves your phone. We use the device code to recognise your devices.
• Sign-in records. When you sign in, change your PIN or reset it, we record the time, the device, the IP address and the app or browser details.
• Notification token. If you are signed in and you allow notifications, we store the token that lets us send notifications to your phone.
• Security checks. When the app starts, when you sign in and before payments, it checks your phone. It checks whether the phone is rooted or jailbroken, whether a debugger, emulator or hooking tool is running, whether the app has been changed and where the app was installed from. It uses Google Play Integrity on Android, Apple App Attest on iPhone and the Talsec freeRASP security tool. We store the results with your device code, IP address, country, device name and operating system. If you are signed in, we also store your account with them. Today, if the app finds that your phone is rooted or jailbroken, or that a hooking tool is running, it signs you out, and you cannot sign in or pay on that phone. On a rooted Android phone the app also shows a warning and closes. On a jailbroken iPhone it shows a warning and then lets you browse without signing in. The other results are recorded but do not block anything.
• Crash reports and analytics. The app uses Google Firebase Crashlytics to report crashes, with your phone model and operating system. It uses Google Firebase Analytics to record basic use of the app, such as when it is opened and for how long, and when a referral code is applied or shared. We do not link this data to your CEYRES account. On Android, while analytics is on, Firebase Analytics can also collect your phone's advertising ID. Crash reports and analytics are on unless you turn them off in Settings, under Share Diagnostics & Analytics.
• Server logs. Our servers log each request: your IP address, your app or browser details and the address requested. When the app sends your location with a request, the location is in the log too.
• Copies of messages we send you. We keep copies of the SMS messages and emails we send you, with their full text. We use them to check that they were delivered and to answer questions about them. This includes messages that carry a sign-in code. A sign-in code stops working after 5 minutes. We also keep a record of the push notifications we send.
• Records from deliveries. When a driver collects or delivers a parcel, they may take a photo as proof. A photo can show your door or its surroundings. Food deliveries are confirmed with your delivery code, without a photo. After a delivery, the driver can rate you and add a comment. You do not see these ratings. We keep the photos and ratings with the delivery record.
• Support records. When our team helps you, they may record notes about your request. We keep these with your support history.

6. Using CEYRES without an account

You can browse the app without signing in. While you browse, we collect only:

• your location, if you allow it (section 5);
• server logs (section 5);
• security-check results, with a device code (section 5);
• crash reports and analytics (section 5).

Google Maps receives the maps you view and the addresses you search for (section 13). We do not link any of this to an account. We do not store a notification token for you. Your cart is kept on your phone.

Crash reports and analytics are on by default. The setting that turns them off is in Settings, which you can open once you sign in.

To place an order, you need to sign in, or order at a table through qr.ceyres.com (section 7).

7. Table ordering and our websites

This policy also covers ordering on our websites.

Ordering at a table

• You scan the QR code on a restaurant table with your phone. You can then order in the CEYRES app, or in your phone's browser at qr.ceyres.com.
• In the browser, the person who starts a table confirms their phone number with a one-time code. Others can join the table without a code. Giving a phone number is optional for them. In the app, the phone number on your account is used.
• We record the phone number (if given), a random device code that the page saves in your browser, your IP address, your browser details, what is ordered and what is paid.
• When you confirm your phone number on qr.ceyres.com, we create a CEYRES customer record for that number, or use the one that already exists. This happens even if you have never used the app.
• Others at the table see the table's shared bill. They see your first name, or "Guest" and a number. They do not see your phone number.
• The restaurant sees the table's orders and the name or phone number of the person who started the table. Its staff can also see each person's phone number, what they ordered and what they paid.
• You can pay at the till or with Points. In the browser, paying with Points needs a one-time code sent to your phone. Card payment at a table works only in the CEYRES app.

Contact form on ceyres.com

If you use the contact or call-back form on ceyres.com, we keep your name, phone number, email address, business type, message and IP address. We email them to our support team through Google Workspace so that we can reply.

Cookies and browser storage

• ceyres.com does not set cookies.
• qr.ceyres.com saves the random device code, your table session and your currency setting in your browser's storage. This keeps ordering working as you move between pages. You can clear this storage in your browser settings.
• ceyres.com and qr.ceyres.com do not use cookies or browser storage for advertising or analytics.
• order.ceyres.com and booking.ceyres.com, our food ordering and booking websites, each have their own sign-in, separate from the app. If you sign up on order.ceyres.com with your phone number, Google Firebase Authentication sends you the code, so Google receives your number. These sites keep your account, addresses and orders on CEYRES servers, show maps from Google Maps, and use Google Analytics, which sets cookies to measure how the sites are used. To delete an account on either site, email us.

8. App permissions

The app asks for permission to send notifications when you first open it. It asks for other permissions only when a feature needs them. You can change any permission at any time in your phone's settings.

• Location, while you use the app. To show places near you, show distances and set delivery or pickup points. Never in the background.
• Camera. To scan a table's QR code, and to take photos for your profile, reviews and messages. The QR code is read on your phone. On Android, the scanner uses Google ML Kit (section 13).
• Photos. To let you choose pictures to upload. On Android 13 and later, the app uses the system photo picker and cannot see the rest of your photos. If you save an image from the app's share menu, your phone asks you before adding it to your photos.
• Notifications. To send you order updates, account and security alerts and, if you turn them on, promotions.
• Face ID, Touch ID or fingerprint (optional). To sign you in instead of typing your PIN. Your phone does the check. We never receive your face or fingerprint data. We only record that biometric sign-in is on, which type it is, and when it was turned on and last used.
• Calendar. Only to add a booking to your calendar when you tap Add to Calendar. The app does not read your calendar.

9. What we do not collect

• Your contacts or address book.
• Your location in the background.
• Health or fitness data.
• Audio. The app never turns on the microphone.
• Your SMS messages or call history.
• Your full card number, your card's security code or the name on your card.
• Your face or fingerprint data.
• Your phone's built-in device ID. CEYRES receives only the device code described in section 5. The Talsec security tool and, on Android, Firebase Analytics use their own device identifiers (section 13).
• The contents of your calendar.
• Your national identity card (NIC) number. The app does not ask for it.

If you ask our support team to reset your PIN, they may ask for details such as your NIC number, date of birth, address or a recent transaction, to confirm it is you. We record which checks were done, not your answers.

We do not use your data to track you across other companies' apps or websites. We do not show you advertising. The iPhone app never asks for permission to track you, so it cannot read Apple's advertising identifier.

10. How we use your information

• To run your account. We create your account and sign you in with your phone number, a one-time code and your PIN. We send sign-in codes by WhatsApp or SMS. Only one device can be signed in at a time. When you sign in on a new device, we sign out the others and send you an alert. When the app is idle for a few minutes, it locks and asks for your PIN or Face ID again.
• To take and deliver your orders. We pass your order to the business, work out the price and the delivery fee, assign a driver and show live tracking. When a driver is on the way, we send you a delivery code by SMS. We also run table sessions, shared table bills and parcels.
• To take payments and send receipts. We process card payments, 3-D Secure checks, saved cards, card holds and refunds. We send receipts by SMS and, if you gave an email address, by email with a PDF copy.
• To run Points and rewards. Top-ups, payments, refunds as Points, loyalty points, referrals and gift cards.
• To show you what is nearby. We use your location, or the place you choose, to show nearby businesses and distances.
• To publish your reviews.
• To help you. We answer support tickets, refund requests and cancellation requests, give AI Chat answers and reset PINs.
• To send you notifications. Order and account updates. Offers and promotions, by push notification, SMS or email, only if you turn on Promotions & Offers (section 16).
• To keep CEYRES secure. We check devices and sign-ins to prevent fraud and protect payments.
• To fix and improve the app. We use crash reports and analytics, unless you turn them off.
• To keep the records we must keep, and to handle disputes and legal claims. See section 14.

11. Our legal grounds

Sri Lanka's Personal Data Protection Act, No. 9 of 2022 allows us to use personal data only on a lawful ground. We rely on these grounds:

• To provide the service you ask for. Your account, orders, bookings, parcels, table sessions, payments, receipts, Points, support, data downloads and account deletion, and replies to messages you send us on WhatsApp, including automatic replies (section 12).
• Your consent. Location, camera and photos, notifications, offers and promotions by push notification, SMS or email, Face ID or fingerprint sign-in, saving a card, and AI Chat. You can withdraw your consent at any time (section 16). This does not affect what we did before you withdrew it.
• Our legal duties. Keeping payment and order records under the Central Bank of Sri Lanka's rules for payment apps, and answering lawful requests from courts, the police and regulators.
• Our legitimate interests, balanced against your rights. Keeping CEYRES and your account secure, preventing fraud, crash reports and analytics, handling disputes, and improving CEYRES. You can object to any of these (section 16).

12. AI Chat

AI Chat is a tab in the app that gives automatic answers to your questions.

We ask first. Before your first AI Chat message, the app asks for your agreement. It names OpenAI and Google Gemini, says what is sent to them, and says that answers can be wrong. If you choose "Not now", AI Chat stays closed. The rest of the app works as normal.

What is sent. When you send a message, we send these to OpenAI, which writes the reply:

• your message;
• up to 30 earlier messages from the same conversation;
• your name;
• how long you have had a CEYRES account;
• the status and date of your last three orders;
• if you send a photo, a link to it. We store the photo on our server.

If OpenAI is not available, we send the same information to Google Gemini instead. We send it only so that they can write the reply. We do not send your email address, your Points balance or any payment amounts.

Answers can be wrong. AI Chat answers are generated automatically. An answer is not an order, a cancellation or a refund decision. For anything about a payment or an order, check the order screen or ask our team. Do not type card numbers, your PIN or passwords into AI Chat.

Reaching a person. AI Chat cannot pass you to a person. To reach our team, use Profile → Help & Support or email us. Authorised CEYRES staff can read AI Chat conversations when they need to, for example to look into a complaint.

Withdrawing your agreement. Your agreement is saved on your phone until you sign out. To withdraw it, stop using AI Chat or sign out. We ask again before your next AI Chat message.

How long we keep it. We keep AI Chat conversations while you have an account. We delete them when your account is deleted. To have them deleted sooner, email us.

WhatsApp. If you message CEYRES on WhatsApp, Meta carries the messages. Our automatic assistant may reply using OpenAI or Google Gemini. It uses the same kind of information as AI Chat, plus your WhatsApp profile name. Our staff can read the conversation and reply. If you message a business that uses the CEYRES WhatsApp assistant, the same applies to that conversation.

13. Who we share your information with

The business you order from

The restaurant, shop or service provider receives:

• your name, or your phone number if you have not given a name;
• your phone number;
• your email address, if you gave one;
• your delivery address and its point on the map;
• what you ordered and your notes;
• your table number;
• whether you have paid.

These businesses manage their orders on systems that CEYRES hosts for them. A restaurant receives a food order paid by card only after your payment or card hold succeeds. A shop receives your order when you place it.

Offers from businesses. If you have turned on Promotions & Offers, a business you have placed a paid order with in the last 180 days can send you offers through CEYRES as push notifications. The business does not receive your notification token for this.

The business also sees your reviews of it with your full name and phone number. If you ask for a refund on one of its orders, it sees your request, with your name, phone number, email address and the reason you gave.

CEYRES delivery drivers

Drivers receive your name, phone number, delivery address and its point on the map, and the details of the order or parcel. For a parcel, they also receive the pickup contact details and the receiver's name and phone number. You can chat with your driver in the app.

Parcel receivers, and anyone with a tracking link

When a driver accepts a parcel, we may send the receiver an SMS with a link to track it. You can also share the link from the app. Anyone who has the link can see:

• the receiver's name;
• the delivery address and its point on the map;
• the pickup point on the map;
• the tracking number;
• the driver's first name and the first letter of their last name;
• the vehicle's number plate, and the driver's rating and number of deliveries;
• the driver's live location;
• the time of each step of the delivery.

The link does not show the sender's name or the pickup address. It works for 30 days, unless we turn it off sooner. Each time someone opens the link, we record their IP address and browser details.

The public

Anyone can see your reviews: the rating, the text and your name. We shorten your name to your first name and the first letter of your last name. If your profile has a one-word name, that name is shown in full. If it has no name, the review shows "Customer". The business can reply publicly.

Companies that provide services to us

• Amazon Web Services: hosts our servers, databases, backups and locked records archive, including our SMS gateway. It holds all the data described in this policy. Location: Mumbai, India.
• Cloudflare: protects our websites and app connections and makes them faster. All traffic passes through it, including your IP address, the address requested and your app or browser details. It tells us which country a connection comes from.
• Commercial Bank of Ceylon (ComBank) and Mastercard Payment Gateway Services: process card payments, run 3-D Secure checks and hold saved cards. They receive your card details, the amount and the order reference. For 3-D Secure, they also receive your IP address and details of the app's built-in browser, such as its type, language, screen size and time zone. They pass these to the bank that issued your card.
• Mobitel: delivers our SMS messages, such as sign-in codes, order and receipt messages, delivery codes, security alerts, data download links and parcel tracking links. It receives the phone number and the message text.
• Meta (WhatsApp Business): delivers sign-in codes by WhatsApp and carries WhatsApp chats with CEYRES. It receives your phone number and the message.
• Google Workspace: sends our emails, such as receipts with a PDF copy and PIN-reset codes, and holds the emails you send to [email protected]. It receives your email address and the email.
• Google Firebase: delivers push notifications (Cloud Messaging), and handles crash reports (Crashlytics) and app analytics (Analytics). It receives your notification token and the notification, crash details and app-use data. On Android, while analytics is on, this can include your advertising ID.
• Apple: delivers notifications to iPhones, checks that the app is genuine (App Attest) and turns map points into addresses on iPhone. It receives your notification token and the notification, the app's check data and the map points you look up.
• Google Play Integrity: checks on Android that the app and the phone are genuine. It receives a check token from the app.
• Google Maps Platform: shows maps, searches addresses and works out routes and distances. From your phone, it receives the maps you view, the text you type in address search and the map position you are looking at. From our servers, it receives pickup and delivery map points. On Android, Google also turns map points into addresses.
• OpenRouteService (HeiGIT, Germany): if Google's route service does not answer, our servers send the same pickup and delivery map points to OpenRouteService to work out the route and distance.
• Google ML Kit: on Android, the app's QR scanner uses Google ML Kit. It reads the code on your phone. Google may receive performance and usage statistics.
• OpenAI: writes AI Chat replies (section 12). Location: United States.
• Google Gemini: writes AI Chat replies when OpenAI is not available. It receives the same information as OpenAI.
• Talsec (freeRASP): a security tool inside the app that detects attacks and tampering. It receives security and diagnostic information about your device, including a device identifier. Talsec states that this data is not linked to your identity.

Everyone in this section must protect your data as section 23 describes.

CEYRES staff

Authorised CEYRES staff can see customer profiles, orders, payments, saved-card records, support messages and AI Chat conversations, and they can prepare data downloads. They use this access only to run CEYRES, help you, prevent fraud and meet our legal duties. We keep a log of the changes staff make.

Legal requests

We share personal data when the law requires it (section 26).

We do not sell personal data. We do not let other companies use it for their advertising.

14. How long we keep your information

• Your account and profile (name, email address, gender, birthday, photo, PIN hash, saved addresses, favourites, recurring orders, referral code, devices and notification settings): while your account exists. Section 15 explains what happens when you delete it.
• AI Chat conversations: while your account exists. We delete them when your account is deleted.
• Saved cards: usable until you delete the card or your account, or the card expires. We then delete it at the payment gateway and keep a record that it was saved (see Other records).
• Card payment records in our main database: 7 years. Then they are deleted automatically.
• Locked records archive: each month, we copy orders, payments, card payment records, receipts, Points transactions, table-bill payments, sign-in and PIN-reset records, notification records, records of changes made by our staff, and the copies of SMS messages and emails we sent, into a locked archive. Each copy is locked for 7 years from the day we archive it, and then deleted. During that time, no one, including CEYRES, can change or delete it, even if you delete your account. We keep these copies because the Central Bank of Sri Lanka's rules for payment apps require us to keep payment records for 7 years.
• Other records with no fixed deletion date: orders and bookings in our main database, table sessions, parcels (with the receiver's details and drivers' photos), support tickets and their messages, notes our support team makes, refund requests, chats with drivers, photos sent with messages or reviews, ratings drivers give you, gift cards, records of saved cards you removed, WhatsApp conversations with CEYRES and the contact record our chat system keeps for your number, files we prepared for Download My Data, sign-in records, records of sign-in codes we sent, deletion and data-download requests, and website contact forms. We keep these while we need them to handle orders, refunds, disputes and our legal duties. We review them and delete what we no longer need. We keep none of them for more than 7 years.
• Security-check results: 90 days.
• Server logs: access logs are kept 14 days on our servers and 30 days in our log monitoring system. Application logs, which can also contain phone numbers and IP addresses, are kept for 90 days.
• Backups: we keep full copies of our databases on our backup server for 30 days. Data you delete may stay in a backup until that backup is removed.
• Requests to join a table: requests that expired, were refused or were cancelled are deleted 30 days after they were made. Approved requests are kept with the table's records.
• Sign-in codes: each code works for 5 minutes.
• The link to download your data: works for 7 days.
• Parcel tracking links: work for 30 days, unless we turn them off sooner.
• Data held by the companies in section 13: kept under each company's own rules.

15. Deleting your account

In the app

1. Open Settings and tap Delete Account.
2. Tell us why, if you wish, and confirm.
3. Enter the code we send to your registered phone.
4. Our team reviews your request. We aim to do this within 2–3 business days, and we may contact you. We may refuse or delay a request while you have an order in progress, an unpaid amount, or an open refund or dispute, or where the law requires us to keep the account. If we do, we tell you why.
5. If you have CEYRES Points that you bought by card, or that we gave you as a refund of a card payment, we pay that amount back to you. We contact you to arrange this. Free Points, such as referral, loyalty, promotional and gift-card Points, are not paid back and end when the account is deleted. Your deletion waits until we have done this.
6. Once we approve your request, there is a 3-day waiting period. You can cancel the request in the app at any time until the deletion is complete. If you confirm in writing that you want it done sooner, we can complete it before the 3 days end.
7. The deletion then runs automatically. We send you an SMS to confirm it is done.

Without the app. Use the form at ceyres.com/delete-account. We send a code to the phone number on your account, and you type it into that page. The request then follows the same steps. You can use this route if you ordered at a table on qr.ceyres.com and never used the app. If you no longer have that phone number, email [email protected]; we check that the account is yours in another way, without asking you for any code, and then file the request for you. To cancel a request, use the app or email us before the deletion is complete.

What we delete

• Your name, email address, gender, birthday, notification token and referral code.
• Your profile photo, including the image file.
• Your PIN, the hashes of your earlier PINs and your Face ID or fingerprint settings.
• Your saved addresses, favourites and recurring orders.
• Your reviews of businesses.
• Your saved cards stop working: we delete each card at the payment gateway, so it can never be charged again. If the bank does not confirm, our staff try again until it does.
• Your AI Chat conversations.
• The devices registered to your account.

We also replace the phone number on the account with a random code, so the number can no longer be used to sign in to it or to find it in the app. We sign out every device and block the account, so no one can sign in to it.

What we keep

• Your orders, bookings, table orders and parcels, with the name, phone number, email address and delivery address recorded on them.
• Payments, card payment records, receipts and Points transactions.
• Copies of the SMS messages and emails we sent you, and sign-in and security records.
• Support tickets and their messages, notes our support team made, refund requests and chats with drivers. Photos you attached to messages or reviews stay on our server at their web address.
• Ratings drivers gave you, and gift cards you sent or received.
• WhatsApp conversations you had with CEYRES, which are a separate support channel. We also keep the contact record our chat system made for your phone number, with your phone number and the name it showed.
• The record of your deletion request: the name, phone number and email address on the account when you asked, the reason and any note you gave, the dates, and for a request from ceyres.com/delete-account, the IP address it came from.
• A record of each card you saved: its type, last four digits, expiry, the gateway's reference for it, and when, under which terms and from which IP address you agreed to save it.
• Any rating or comment you gave a parcel delivery, with the parcel record.
• Any copy of your data that we prepared for you to download.

We keep these records for the periods in section 14. The business that handled an order keeps its own record of that order in the system CEYRES hosts for it.

16. Your choices and rights

• Get a copy of your data. In Settings, tap Download My Data. Our team prepares a file with your profile, orders, bookings, Points balance and transactions, loyalty points, saved addresses, the SMS messages and emails we sent you, your reviews, your support tickets and their messages, and your refund requests. We send you a link by SMS. To open it, you enter a code we send to your registered phone. The link works for 7 days. The file does not include parcels, chats with drivers, AI Chat conversations, saved cards, card payment records, or device and sign-in records. To get a copy of these, email us.
• Correct your data. Change your name, email address, gender, birthday and photo in Edit Profile. Add, change or delete saved addresses. For anything else, email us.
• Delete your data. Delete your account as section 15 explains. You can also ask us to delete particular data, such as your AI Chat conversations, without deleting your account. We delete what we do not have to keep.
• Withdraw your consent. Change location, camera, photos, calendar and notification permissions in your phone's settings. In Settings, turn off Promotions & Offers, or the Face ID or fingerprint login switch. Delete a saved card in Saved Cards. We delete it at the payment gateway first, then remove it from your account. To withdraw your AI Chat agreement, stop using AI Chat or sign out (section 12). Withdrawing your consent does not affect what we did before. Some features may stop working.
• Notifications and promotions. In Settings, you can turn off Push Notifications, Order Updates, or Promotions & Offers. Turning off Push Notifications stops order updates, offers and announcements sent by push; security alerts and updates about a table reservation are still sent. Promotions & Offers is off unless you turn it on. Offers and promotions, by push notification, SMS or email, go only to customers who have turned on Promotions & Offers; an offer by push also needs Push Notifications on. This includes offers that a business you have placed a paid order with in the last 180 days sends through CEYRES. Other CEYRES announcements go to customers who have Push Notifications on. Messages you need to use CEYRES, such as sign-in codes, security alerts, order messages, delivery codes and receipts, cannot be turned off.
• Analytics and crash reports. Turn them off in Settings, under Share Diagnostics & Analytics.
• Location. Turn it off in your phone's settings. The app still works: you can type an address or choose a point on the map.
• Devices. In Settings, under Manage devices, see where you are signed in and sign a device out.
• A person can review automatic decisions. If an automatic security check blocks your phone or a payment, you can ask a person at CEYRES to review it.
• Your rights under Sri Lankan law. Sri Lanka's Personal Data Protection Act, No. 9 of 2022 gives you rights over your personal data. You can ask to access it, correct or complete it, and delete it. You can withdraw your consent, object to how we use it, and ask for a person to review a decision made only by automatic means.
• How to ask. Email [email protected]. We may ask you to confirm it is you, for example by sending the request from the email address or phone number on your account, or by making it in the app under Profile → Help & Support. We will never ask you to tell us a code we sent to your phone. We reply within 21 working days. If you are not satisfied with our answer, you can complain to the Data Protection Authority of Sri Lanka.

17. Children

You must be at least 18 years old to create a CEYRES account. CEYRES is not meant for children, and we do not knowingly collect personal data from anyone under 18. If you think a child has given us personal data, email us. We will delete it, unless the law requires us to keep a record.

Part B: Businesses

18. Information we collect about your business

• Business details: your business name and type, addresses, branches, opening hours, map locations, logo and images, contact numbers and website.
• Owner and staff details: names, phone numbers, email addresses, roles and permissions, and sign-in details for the business tools. We store the owner's business portal password only as a hash.
• Payout details: bank name, branch, account holder's name and account number. We store the account number encrypted and show only its last four digits.
• Subscription and billing: your plan, fees, invoices, payment status and payment references. If you pay us by card, the payment goes through Commercial Bank of Ceylon (ComBank) and Mastercard Payment Gateway Services, our only card payment gateway.
• Business data you enter or process: products, menus, prices, stock, orders, bookings, customer records, payments, refunds, settlements and cash-drawer records.
• WhatsApp assistant: the knowledge base you write, and the WhatsApp messages it handles, if you use it.
• Messages: your messages to us, and the SMS messages, emails, WhatsApp messages and push notifications we send you.
• Device and usage information: IP addresses, browser and device details and server logs. Our business tools use cookies and browser storage to keep you signed in. The CEYRES Business app also sends crash reports and app-use analytics to Google Firebase.

19. How we use it, and our legal grounds

• To provide the CEYRES platform: point of sale, online and QR ordering, kitchen screens, bookings, delivery, the WhatsApp assistant and reports.
• To take card payments from your customers through CEYRES, and to pay you what you are owed.
• To bill your subscription.
• To send you service messages by SMS, email, WhatsApp and push notification.
• To give you support.
• To keep the platform secure and prevent fraud.
• To keep the records that the law and payment rules require.

We do this to perform our agreement with your business, to meet our legal duties, and for our legitimate interests in running a secure and working platform. Where we rely on your consent, you can withdraw it at any time.

20. Who we share it with

• Amazon Web Services: hosts our servers and data in Mumbai, India.
• Cloudflare: protects our websites and connections.
• Commercial Bank of Ceylon (ComBank) and Mastercard Payment Gateway Services: card payments from your customers, and any card payment you make to us.
• Mobitel: SMS messages.
• Meta (WhatsApp Business): WhatsApp messages, including the WhatsApp assistant.
• Google Workspace: email.
• Google Firebase: push notifications to the CEYRES business apps; crash reports (Crashlytics) and app-use analytics (Analytics) from the CEYRES Business app; and, in the CEYRES Services app, a one-time code to check your phone number (Firebase Authentication). It receives your notification token, crash details, app-use data and, for the code, your phone number.
• Google Maps Platform: maps for your locations and delivery areas.
• OpenAI and Google Gemini: AI features you choose to use, such as the WhatsApp assistant.
• The bank that makes payouts: to pay you, we give your bank details to the bank that makes the transfer.
• Your customers: they see your business name, address, branches, opening hours, catalogue and prices, and your replies to reviews.
• CEYRES delivery drivers: they see your business name and pickup address, and the details they need to collect orders.
• Legal requests: see section 26.

Everyone in this list must protect your data as section 23 describes.

21. Your customers' personal data

Our business terms say that you own the business data you enter into CEYRES, and that we use it only to provide our services and meet our legal duties. Orders placed through the CEYRES app or a CEYRES QR code are also CEYRES's records, which we use as Part A explains.

When a customer orders or books with you through the CEYRES app or a CEYRES QR code, reviews your business, or asks for a refund on one of your orders, we give you the details listed in section 13. Our business terms allow you to use them only to fulfil and support that order or booking, to reply to that review and to help us handle that refund request. You must keep them secure and give them the same protection as this policy.

If you use CEYRES to run your own till, ordering or booking system, the details your customers give you there are stored on CEYRES servers for you. Your customers should ask you about your own privacy practices.

WhatsApp assistant. If you turn it on, your customers' WhatsApp messages to your business pass through Meta's WhatsApp Business service. To write replies, we send OpenAI the message, the earlier conversation and your knowledge base. If the sender is a CEYRES customer, we also send their name, how long they have had a CEYRES account and the status and date of their recent CEYRES orders. If OpenAI is not available, we send the same information to Google Gemini.

22. How long we keep it, and your rights

• Business, owner and staff details: while your subscription is active.
• After your subscription ends: our business terms give you 30 days to export your data. After that, we may delete it.
• Orders, payments, settlements and cash-drawer records: kept in the locked 7-year archive described in section 14.
• Other records: we review them and delete what we no longer need. We keep none of them for more than 7 years after your subscription ends.
• Server logs and backups: as described in section 14.

You can view and update your business details in the business portal at app.ceyres.com and in the CEYRES Business app. To get a copy of your data, correct it, delete it or object to messages you do not need, email [email protected]. You have the same rights under Sri Lankan law as section 16 describes, and we reply within 21 working days.

Part C: Everyone

23. The same protection from everyone who receives data

Everyone we share personal data with must give it the same or equal protection as this policy describes. They may use it only for the purpose we share it for. This applies to:

• the businesses you order from;
• CEYRES delivery drivers;
• every service provider named in sections 13 and 20;
• any company related to IPERLY (PVT) LTD.

We share with each of them only what they need for their role.

24. Where data is stored, and transfers outside Sri Lanka

We store data on Amazon Web Services servers in Mumbai, India. This means your personal data is transferred outside Sri Lanka.

Some of the companies in sections 13 and 20 also handle data in other countries. OpenAI is in the United States and OpenRouteService (HeiGIT) is in Germany. Google, Apple, Meta, Cloudflare, Talsec and Mastercard (our card payment gateway) handle data on their networks in several countries. Mobitel is in Sri Lanka.

We send each company only the data its role needs, over encrypted connections. When these companies handle your personal data for us, we remain responsible for it under Sri Lanka's Personal Data Protection Act.

25. How we protect data

• Connections between the app or your browser and our servers are encrypted (HTTPS).
• Customer PINs and business portal passwords are stored only as hashes.
• Card details are typed into the payment gateway's fields and never reach our servers.
• Payout bank account numbers are stored encrypted.
• Your phone's built-in ID is combined with a random value on your phone before the app uses it.
• Face ID and fingerprint checks happen only on your phone.
• Only one device can be signed in to a customer account at a time. We alert you when a new device signs in, and you can sign devices out yourself.
• The app locks when it is idle, and sign-in sessions expire.
• The app checks for rooted or jailbroken phones, hooking tools and changed copies of the app (section 5).
• Only authorised staff can use our admin systems, and we keep a log of the changes they make.

Photos stored on our servers are not password-protected. This includes profile photos, photos attached to reviews and messages, and drivers' delivery photos. Anyone who has, or can work out, a photo's web address can open it. Profile photo addresses are built from the account number and the time of upload, and drivers' delivery photo addresses from the order number, the driver number and the time, so they can be guessed.

Never share your PIN, or a sign-in, PIN-reset or account-deletion code, with anyone, including people who say they work for CEYRES. The only code you give to a person is the delivery code, to your driver, when your order arrives.

No system is completely secure. If you think your account has been misused, email us straight away.

26. Legal requests, and no sale of data

We share personal data when the law requires us to. For example, we may share it with a court, the police or a regulator such as the Central Bank of Sri Lanka.

We do not sell personal data, and we do not let other companies use it for their advertising. We send you offers and promotions only if you turn on Promotions & Offers (section 16).

27. Data breaches

If a personal data breach is likely to harm you, we will tell you and the Data Protection Authority of Sri Lanka, as the law requires.

28. Changes to this policy

When we change this policy, the "Last updated" date at the top of this page changes. If a change significantly affects how we use your personal data, we will tell you in the app or by message before the change takes effect.

29. Contact, requests and complaints

• For any question or request about your personal data, email [email protected].
• To reach our Data Protection Officer, write "Attention: Data Protection Officer" in the subject line.
• Our registered office is IPERLY (PVT) LTD, No. 166/1 Aluththota, Waikkala, Sri Lanka.
• We may ask you to confirm who you are before we act on a request.
• We reply within 21 working days.
• If you are not satisfied with our answer, you can complain to the Data Protection Authority of Sri Lanka.