Legal
Privacy policy
Last updated 12 November 2026
This policy explains how Kripson (Pvt) Ltd ("Kripson", "we") collects and uses personal information through kripson.lk, the client portal and our products. We follow the Sri Lanka Personal Data Protection Act, No. 9 of 2022.
What we collect
- Account details — your name, email, phone, company and password (stored only as a one-way hash).
- Project and billing information — briefs, messages, files you upload, orders, invoices and payment status.
- Newsletter subscriptions — your email and the date you subscribed.
- Technical data — IP address and basic request logs, used for security and rate limiting.
We do not see or store card numbers. Card payments are processed by PayHere or Stripe under their own privacy policies. Bank-transfer slips you upload are stored privately and visible only to you and our finance team.
How we use it
- To deliver projects, products and support you've asked for.
- To send receipts, project updates and service notices.
- To send the newsletter, only if you subscribe — every email has a one-click unsubscribe link.
- To keep the site secure and prevent abuse.
AI features
If you use the AI Lab or chat assistant, the text you type may be processed by our AI provider (Anthropic) to generate a response. Please don't enter sensitive personal information into these tools.
Sharing
We share data only with service providers who help us run Kripson (hosting, email delivery, payment processing, AI processing), and when required by law. We never sell personal data.
Your rights
You can access, correct or delete your information at any time from My account, or by emailing [email protected]. We keep billing records for as long as the law requires.
Contact
Questions about privacy? Email [email protected].