Privacy Policy

1. Scope

This policy applies to personal data processed through the Platform, including when you browse listings, create an account, publish listings, communicate through inquiries, pay fees, or contact support.

Separate terms may apply to certain services (e.g., payment processors). Where those terms conflict with this policy for that service, those terms may control for that specific processing activity.

2. Definitions

• “Personal data” means information that identifies or can reasonably identify a person (e.g., name, email, phone, device identifiers).
• “Processing” means anything we do with personal data (collecting, storing, using, sharing, deleting).
• “You” means a visitor, user, buyer, seller, agent, organization user, or anyone interacting with the Platform.

3. Personal Data We Collect

We collect data you provide, data generated through your use of the Platform, and data from trusted third parties where applicable.

We configure analytics to avoid sending personal contact content into analytics tools. For example, we do not intentionally send phone numbers, email addresses, inquiry message content, or exact street addresses as analytics event data.

Sensitive data: Please do not upload sensitive personal data (e.g., national ID scans) unless the Platform explicitly asks for it. If you upload it anyway, you consent to our processing to provide the service and protect Platform safety.

4. How We Use Personal Data

• • Provide, operate, and maintain the Platform (accounts, listings, inquiries, support)
• • Improve search relevance, listing quality, and user experience
• • Process fees, subscriptions, and billing activities
• • Communicate important notices (security alerts, policy updates, transactional messages)
• • Prevent fraud, abuse, spam, and policy violations (including automated security checks)
• • Measure funnel performance, understand high-level buyer and seller intent, and identify UX friction such as failed uploads, validation issues, or drop-off points
• • Understand which pages, listings, search experiences, and locations generate engagement, inquiries, and leads
• • Comply with legal obligations and enforce our terms

5. Legal Bases (Why We Process Data)

Where required under applicable law (including Sri Lanka’s PDPA), we process personal data only when we have a valid reason. These reasons may include:

• Contract / service delivery: to create accounts, publish listings, handle inquiries, and provide requested features.
• Legitimate interests: to secure the Platform, prevent abuse, improve performance, and protect users and our business.
• Consent: where you explicitly opt in (e.g., certain marketing communications, optional cookies where applicable).
• Legal obligations: to comply with laws, lawful requests, and regulatory requirements.

6. How We Share Data

We do not sell your personal data. We may share data in limited cases:

• With other users (marketplace): information you choose to publish in listings (and limited contact workflows, as described below).
• With service providers: hosting, storage, email delivery, security, analytics, and payment services that support Platform operations.
• For legal and safety reasons: to comply with law, respond to lawful requests, enforce terms, investigate fraud/abuse, or protect rights and safety.
• Business transfers: in a merger, acquisition, restructuring, or asset sale (with appropriate safeguards).

7. International Transfers

Some of our service providers may process data outside Sri Lanka. When data is transferred internationally, we take reasonable steps to ensure appropriate safeguards (such as contractual protections and vendor due diligence).

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

9. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal data, including access controls, monitoring, and secure configuration practices. However, no system is 100% secure.

If you believe your account has been compromised, contact us immediately at [email protected].

10. Cookies & Similar Technologies

We may use cookies and similar technologies to keep you signed in, remember preferences, secure the Platform, and measure performance and product usage. Some features may not work properly if cookies are disabled.

• • Essential cookies: required for authentication, security, and core functionality.
• • Preference cookies: remember settings like theme or language.
• • Analytics (optional): if enabled, helps us understand search behavior, listing engagement, session journeys, conversion activity, and UX friction so we can improve the Platform.

Optional analytics technologies are loaded only after you accept analytics cookies through our consent controls. If you decline analytics cookies, we do not intentionally activate those optional analytics tags for your visit.

Analytics data may include pseudonymous session identifiers, page views, referral source, device/browser details, approximate location derived from IP, search filters used, results counts, listing interaction events, and engagement signals such as scroll depth or CTA position.

11. Marketplace Visibility & Messaging

The Platform is a marketplace for property listings. When you publish a listing, certain information becomes visible to other users (for example: listing title, area, district/city, price, photos, and description).

Inquiries and messaging features may share limited information necessary to enable communication (e.g., your name and contact details, or an anonymized relay where available). Do not share sensitive information through public listing text or messages.

We may moderate, restrict, or remove content that violates our policies, or suspend accounts engaged in abuse, fraud, or spam.

12. Children’s Privacy

The Platform is not intended for children. We do not knowingly collect personal data from children under the age required by applicable law. If you believe a child has provided personal data, contact us and we will take steps to remove it.

13. Your Rights & Choices

Depending on your location and applicable law (including Sri Lanka’s PDPA), you may have rights such as:

• • Request access to personal data we hold about you
• • Request correction of inaccurate or incomplete data
• • Request deletion or restriction of processing in certain circumstances
• • Withdraw consent where processing is based on consent
• • Object to certain processing activities where legally available

To make a request, email us at [email protected]. We may need to verify your identity before responding.

14. Third-Party Services & Sub-processors

We use trusted vendors to provide hosting, email delivery, security, and other infrastructure. These vendors process data on our instructions where applicable.

15. Changes to This Policy

We may update this policy from time to time. We will update the “Last updated” date at the top of this page. If changes are material, we may provide additional notice through the Platform or via email where appropriate.

16. Contact Us