Privacy Policy

1. Introduction

CAAQIT ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Contact Information: Name, email address, phone number, business address
• Business Information: Company name, job title, industry, business requirements
• Financial Information: Billing address, payment method details (processed securely through PayHere.lk)
• Communication Data: Records of correspondence, support tickets, feedback

2.2 Technical Information

• Website Usage: IP address, browser type, operating system, referring URLs
• Cookies and Tracking: Session data, preferences, analytics information
• Device Information: Device type, screen resolution, language settings
• Log Data: Access times, pages viewed, actions taken on our website

2.3 Project-Related Information

• Requirements: Project specifications, technical requirements, business goals
• Content: Data provided for AI training, software customization, or consultation
• Usage Analytics: How you use our software products and services

3. How We Use Your Information

3.1 Service Delivery

• Provide software development and AI consulting services
• Process payments and manage billing
• Deliver customer support and technical assistance
• Customize our services to meet your specific needs

3.2 Communication

• Respond to inquiries and provide customer support
• Send service updates, security alerts, and technical notices
• Share relevant industry insights and company updates (with consent)
• Conduct client satisfaction surveys and feedback collection

3.3 Business Operations

• Improve our website, services, and user experience
• Analyze usage patterns and service performance
• Prevent fraud and ensure security
• Comply with legal and regulatory requirements

4. Information Sharing and Disclosure

4.1 We DO NOT Sell Your Information

We do not sell, trade, or rent your personal information to third parties.

4.2 Limited Sharing

We may share your information only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in service delivery (cloud hosting, payment processing, analytics)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of business assets
• Consent: When you explicitly authorize us to share specific information

4.3 Third-Party Services

• PayHere.lk: Payment processing (subject to their privacy policy)
• Google Analytics: Website analytics (anonymized data)
• Microsoft Clarity: User behavior analytics (anonymized data)
• Cloud Providers: Secure data hosting and backup services

5. Data Security

5.1 Security Measures

• Encryption: All data transmitted using SSL/TLS encryption
• Access Controls: Limited access to personal information on need-to-know basis
• Secure Storage: Data stored on secure, regularly monitored servers
• Regular Audits: Security assessments and vulnerability testing

5.2 Payment Security

• All payments processed through PayHere.lk's secure platform
• We do not store credit card or banking information
• PCI DSS compliant payment processing

6. Data Retention

6.1 Retention Periods

• Client Data: Retained for duration of business relationship plus 7 years for tax/legal purposes
• Project Files: Retained for 3 years after project completion
• Marketing Data: Until you unsubscribe or request deletion
• Website Analytics: Anonymized data retained for 26 months

6.2 Data Deletion

We will delete your personal information when:

• It's no longer needed for the purposes it was collected
• You request deletion (subject to legal retention requirements)
• Your consent is withdrawn

7. Your Rights and Choices

7.1 Access and Control

• Access: Request a copy of personal information we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Receive your data in a structured, machine-readable format

7.2 Marketing Communications

• Opt-out of marketing emails using unsubscribe links
• Update communication preferences in your account settings
• Contact us to modify your communication preferences

7.3 Cookies and Tracking

• Manage cookie preferences through browser settings
• Opt-out of analytics tracking where available
• Use private/incognito browsing modes

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:

• Adequacy decisions by relevant data protection authorities
• Standard contractual clauses with third-party processors
• Certification schemes and codes of conduct

9. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand website usage
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

10.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may impact website functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you of significant changes via email or website notice
• Provide opportunity to review changes before they take effect

12. Contact Information

13. Complaints

If you have concerns about how we handle your personal information, you can:

1. Contact our Data Protection Officer at privacy@caaqit.com
2. File a complaint with your local data protection authority
3. Seek legal remedies if you believe your rights have been violated