Privacy Policy

Privacy Policy

Effective Date: March 19, 2026

At IPERLY (PVT) LTD ("CEYRES", "we", "us", "our"), we are committed to protecting the privacy and security of our customers' personal information. This Privacy Policy outlines how we collect, use, and safeguard your information when you use our platform, website (ceyres.com), mobile applications, and related services (collectively, the "Services"). By using our Services, you consent to the practices described in this policy.

1. Information We Collect

When you use our Services, we may collect certain information about you, including:

  • Personal identification information such as your name, email address, phone number, and business details provided during registration or account setup.
  • Business data including products, orders, bookings, customer records, and transaction information processed through our platform.
  • Payment and billing information necessary to process your subscription payments, which are securely handled by trusted third-party payment processors (PayHere, WebXPay).
  • Device and usage information such as your IP address, browser type, device information, and usage patterns collected automatically through cookies and similar technologies.
  • Communication data including messages sent through WhatsApp Business API integration, SMS notifications, and email correspondence.

2. Use of Information

We use the collected information for the following purposes:

  • To provide, maintain, and improve our SaaS platform and related services.
  • To process your subscription payments and manage your account.
  • To facilitate business operations including POS transactions, online ordering, service bookings, and WhatsApp communications.
  • To communicate with you regarding your account, provide customer support, and respond to inquiries.
  • To send important notifications about service updates, billing reminders, and system alerts.
  • To personalize your experience and provide relevant feature recommendations.
  • To detect and prevent fraud, unauthorized access, and abuse of our platform.
  • To comply with legal obligations and enforce our terms of service.

3. Information Sharing

We respect your privacy and do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

  • Payment processors: We share necessary payment information with PayHere and WebXPay to process your subscription payments securely.
  • Cloud infrastructure: Your data is stored on Amazon Web Services (AWS) servers located in the Mumbai (ap-south-1) region.
  • Communication services: We use text.lk for SMS delivery and Google Workspace for email services.
  • AI services: WhatsApp AI features may process conversation data through OpenAI or Google Gemini APIs to provide automated responses.
  • Legal requirements: We may disclose your information if required by Sri Lankan law or in response to valid legal requests.

4. Data Security

We implement industry-standard security measures to protect your personal information:

  • All data transmissions are encrypted using SSL/TLS (Cloudflare SSL Full mode).
  • Sensitive data is encrypted at rest using AES-256 encryption.
  • Database access is restricted to authorized services only, with separate credentials per service.
  • Daily automated backups ensure data durability and disaster recovery.
  • JWT-based authentication secures API access.

However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our Services. Business transaction data is retained for the duration of your subscription plus 12 months. You may request deletion of your data by contacting us, subject to legal retention requirements.

6. Your Rights

You have the right to:

  • Access and review your personal data stored in our systems.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data (subject to legal obligations).
  • Export your business data in standard formats.
  • Opt out of non-essential communications.

7. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and gather information about your interactions with our platform. You can manage cookie preferences through your browser settings.

8. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.

9. Children's Privacy

Our Services are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Last updated: March 31, 2026

Chat with us