This policy explains how Ceygate Solutions (“Ceygate”, “we”, “us”) handles personal data when you use ceygate.lk, our free online tools, and our business apps (SmartPOS, SmartBill, SmartCash, SmartPay, SmartCRM, SmartSocial and the other Smart apps — together, the “Services”). We are based in Sri Lanka and follow the Personal Data Protection Act, No. 9 of 2022.
1. Information we collect
Information you give us
- Account details — your name, email address, phone number (optional) and password. Passwords are stored only as a one-way encrypted hash; we never see them.
- Business data you enter in the apps — for example products, sales, invoices, expenses, customers, contacts, staff and payroll records, bookings and social media posts. You own this data; we store and process it only to run the Services for you.
- Staff logins you create for your employees (name, username and password hash).
- Messages and requests — contact forms, meeting bookings, support tickets, creator/agent applications and newsletter sign-ups.
Information from Google Sign-In
If you choose “Continue with Google”, Google shares your name, email address, whether that email is verified, and your Google account ID with us (the openid, email and profile scopes). We use them only to create or sign in to your Ceygate account and to link it to your Google account. We do not receive your Google password, and we do not access your Gmail, Drive, Contacts or any other Google data.
Ceygate’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Information collected automatically
- Page-view counts — we count visits per page per day. This counter uses no cookies and stores no IP addresses or device details.
- Security records — your IP address is kept briefly to block repeated failed sign-in attempts, and our web server keeps standard access and error logs.
- Sign-in history — the time of your last sign-in, and a record whenever a Ceygate administrator opens your account to help you.
Most free tools (calculators, generators and converters) run entirely in your browser; what you type into them is not sent to us unless the tool says otherwise (for example the website audit, which fetches the address you enter).
2. Cookies and local storage
- Sign-in cookies — keep you signed in to the apps, the creator centre or the admin panel. They end when you sign out or close your session.
lang— remembers your chosen language (English, Sinhala or Tamil) for one year.ref— if you arrive through a partner’s referral link, it remembers that partner for 30 days so they are credited if you sign up.- Theme — your light/dark choice is saved in your browser’s local storage.
We do not use advertising or third-party tracking cookies.
3. How we use your information
- To provide, maintain and secure the Services, including your free trial and paid plans.
- To sign you in, including with Google, and to protect accounts from misuse.
- To answer your enquiries and give support. With your request or for support, authorised Ceygate staff may open your account; every such access is logged.
- To send service messages such as password resets and important account notices.
- To send our newsletter — only if you subscribe; every email has an unsubscribe link.
- To credit referral partners and creators for customers they introduce.
- To meet legal, tax and accounting obligations.
We do not sell your personal data, and we do not use your business data for advertising.
4. Who we share it with
We share data only with service providers that help us run the Services, and only what they need:
- Hosting provider — our servers and databases (which may be located outside Sri Lanka).
- Google — only when you choose Google Sign-In.
- Anthropic — only when you use “Write with AI” in SmartSocial: the text and instructions you submit are sent to Anthropic’s Claude API to generate a draft.
- Authorities — when required by law, or to protect the rights and safety of our users or Ceygate.
If you were referred by a partner, that partner can see your account name, sign-up date and how many paid apps you have (never your business data) for commission purposes.
5. How long we keep it
We keep your account and business data while your account is open. If you ask us to close your account, we delete or anonymise your data within 90 days, except records we must keep for legal, tax or dispute-resolution reasons. Security logs are kept for a limited period.
6. Security
All traffic to ceygate.lk is encrypted with HTTPS. Passwords are hashed, secret keys are kept outside the website folder, and access to customer data inside Ceygate is limited to authorised staff and recorded. No system is perfectly secure, so please use a strong, unique password and keep your Google account protected with 2-step verification.
7. Your rights
You can ask us to access, correct or delete your personal data, to stop processing it, or to withdraw consent you have given (for example, to the newsletter). You can also disconnect Google Sign-In at any time from your Google account permissions page — you can still sign in with your email and password (use “Forgot password” to set one). To make a request, email info@ceygate.lk.
8. Children
The Services are meant for businesses and adults. We do not knowingly collect personal data from children under 16.
9. Changes to this policy
We may update this policy from time to time. We will change the date at the top, and for significant changes we will notify account holders by email or in the apps.
10. Contact us
Ceygate Solutions, Colombo, Sri Lanka — info@ceygate.lk. See also our Terms of Service.