Introduction
AlfaSoft (Pvt) Ltd ("AlfaSoft", "we", "our", or "us") is committed to protecting the privacy of our users and customers. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website alfasoft.it.com, use our software products, or engage with our services.
By using our website or products, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access or use our services.
Information We Collect
We may collect the following types of information:
Personal Information
Information that can be used to identify you, including but not limited to:
- Full name and contact details (email address, phone number, postal address)
- Business name and registration details
- Payment and billing information (credit card details are processed securely through our payment gateway partner, PayHere)
- Account credentials (username and encrypted password)
Usage Information
Information collected automatically when you use our services:
- Device information (browser type, operating system, device identifiers)
- Log data (IP address, access times, pages viewed, referring URL)
- Usage patterns within our software products (features used, frequency of use)
- Error and performance data to improve product quality
Business Data
Data you input into our software products as part of your business operations:
- Customer records, inventory data, and transaction histories managed through our software
- Employee and student records (for relevant management systems)
Data Ownership
All business data you enter into our software remains your property. We do not claim ownership of your business data and will never sell it to third parties.
How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide, operate, and maintain our software products and services.
- Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
- Product Improvement: To analyze usage patterns and feedback to enhance our products and develop new features.
- Communication: To send you important updates, security alerts, product announcements, and promotional materials (with your consent).
- Billing & Payments: To process transactions, manage subscriptions, and send invoices.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
- Security: To detect, prevent, and address fraud, security breaches, and unauthorized access.
Data Protection & Security
We implement robust security measures to protect your personal information:
Encryption
All data transmissions are encrypted using SSL/TLS protocols. Sensitive data is stored with AES-256 encryption.
Access Control
Role-based access controls ensure only authorized personnel can access personal data, with strict authentication requirements.
Monitoring
Continuous security monitoring and regular audits to identify and address vulnerabilities proactively.
Backups
Regular encrypted backups ensure your data is safe from loss, with disaster recovery procedures in place.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Third-Party Services
We may share your information with trusted third-party service providers who assist us in operating our business:
- Payment Processors: PayHere (for processing online payments securely)
- Hosting Providers: Cloud infrastructure services that host our software and website
- Analytics Services: Tools like Google Analytics to understand website usage patterns
- Communication Platforms: Email and messaging services for customer communication
Third-Party Standards
We require all third-party providers to maintain appropriate security measures and to only process your personal information as instructed by us. We do not sell your personal information to any third party.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:
- Account Data: Retained for the duration of your account and for up to 2 years after account deletion.
- Transaction Records: Retained for 7 years to comply with accounting and tax regulations.
- Usage Logs: Retained for up to 12 months for security and analytics purposes.
- Marketing Data: Retained until you withdraw consent or unsubscribe.
Your Rights
You have the following rights regarding your personal information:
Right to Access
Request a copy of the personal information we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal information.
Right to Deletion
Request deletion of your personal information, subject to legal obligations.
Right to Restrict
Request restriction of processing your personal information in certain circumstances.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly.
For our School Management System, which may process data related to minors, we require school administrators to obtain appropriate consent from parents or guardians, and such data is handled with additional safeguards.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:
- Posting the updated policy on our website with a revised "Last Updated" date.
- Sending an email notification to registered users for significant changes.
- Displaying a prominent notice on our website or within our software products.
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
AlfaSoft (Pvt) Ltd, Hikkaduwa, Galle, Sri Lanka