Privacy policy

Who is responsible

WEB DESIGNS LANKA runs Sevo Biz App and is responsible for the account and billing data described here. For the business data you enter about your own staff, customers and suppliers, your business decides what is collected and we process it for you, as set out in the Data processing agreement.

What we collect

• Account data: the business name, the administrator's name and e-mail, and the users they invite.
• Business data you enter or import: products, stock, sales, purchases, suppliers, customers, staff and payroll records, and your accounts.
• Billing data: your plan, invoices, payments, and for card payments the card type and last four digits.
• Technical data: sign-in events, device identifiers of registers, and an audit log of changes made in the product.

How we use it

Only to provide, secure and improve the service for you: running your point of sale and back office, computing your reports and insights, billing your plan and answering support requests. We do not sell data, we do not use it for advertising, and we do not use one customer's data to serve another.

Card payments

Card payments are made on the secure payment page of PayHere, our payment gateway. Your card number, expiry date and security code are entered there and never reach us or our servers, and we never store them. PayHere tells us whether the payment succeeded, the card type and the last four digits, which we keep so you can see which card is on file.

Where it is stored and who processes it

Your data is stored in AWS Asia Pacific (Singapore), on Amazon Web Services and Neon (the database), encrypted in transit and at rest. Sign-in is handled by Amazon Cognito and card payments by PayHere. Each company's data is kept separate at the database level, and access inside the product follows the roles your administrator sets.

How long we keep it

For as long as your account is active, then 90 days after cancellation so you can come back or export it, after which it is deleted. Invoices and payment records are kept for as long as accounting and tax law requires.

Your rights

You can see, export and correct your data in the product, and you can ask us for a copy, a correction or the deletion of your account. Write to support@webdesigns.lk; we answer within 3 working days.

Cookies and browser storage

The public site sets no tracking or advertising cookies and runs no analytics scripts. The product uses your browser's storage only for what it needs to work: keeping you signed in, remembering your language and theme, and letting the register keep selling offline.

Changes

When this policy changes, we update the date at the top and tell account administrators of any important change.