Privacy Policy

Compliance: Personal Data Protection Act (PDPA) No. 9 of 2022

1. Encrypted Storage of Identity Data

In compliance with Sri Lankan data security regulations, all uploaded physical documents (NIC images, utility bills) are stored in a **Strictly Private, Encrypted Cloud Bucket**. These documents are not publicly accessible on the internet and are protected by Row-Level Security (RLS) policies.

2. Restricted Access & Retention

Your physical documents are decrypted on-the-fly *only* when requested by an authorized platform administrator via temporary, cryptographically signed URLs. These URLs expire automatically after 5 minutes. Once your identity is verified, these records are archived securely and are never shared, sold, or distributed to any third party.