Privacy Policy

Last updated: 14 November 2026

This Privacy Policy explains how [Business registered name], trading as Social Brandits ("we", "us"), collects and uses personal data when you visit this website or use ChatBrandit (the "Service"). We process personal data in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

1. Information we collect

  • Account and contact details: your name, business name, phone/WhatsApp number and email address when you contact us or subscribe.
  • Billing information: plan, payment status and transaction references. Card payments are processed by our payment provider; we never see or store your full card number.
  • Service data: the WhatsApp conversations, contacts, files, tags and notes handled by the Service on your behalf.
  • Technical data: IP address, browser type and basic usage logs used to keep the Service secure and working.

2. How we use it

  • To provide, operate and support the Service, including generating AI replies and follow-up reminders.
  • To process payments and send invoices and account notices.
  • To respond to your enquiries and demo requests.
  • To keep the Service secure and prevent fraud or abuse.
  • To meet legal and accounting obligations.

We do not sell your personal data, and we do not use your customers' conversations to advertise to them.

3. Your customers' data

When you use the Service, you are the controller of your customers' data and we process it on your behalf, only to run your account. You are responsible for having a lawful basis to message and store details of your customers.

4. Sharing with service providers

We share data only with providers that help us run the Service, under confidentiality obligations:

  • cloud hosting providers that store and run the Service;
  • AI model providers (such as Google and Anthropic) that generate reply text from conversation content, used only to provide the Service;
  • our payment gateway, to process card payments;
  • authorities, where required by law.

Some providers may process data outside Sri Lanka. Where this happens we take reasonable steps to make sure your data stays protected.

5. Data retention

We keep account and service data while your subscription is active. After cancellation, you can request an export for 30 days, after which data is deleted or anonymised, except for records we must keep for legal or accounting reasons.

6. Security

We use encrypted connections (HTTPS), access controls, password protection and regular backups to protect your data. No online service can be 100% secure, but we work to protect your information and will notify you of any breach that affects you, as required by law.

7. Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it, by contacting us at the details below. We will respond within a reasonable time.

8. Cookies

This website uses only essential technical cookies and does not use advertising trackers. [Update this section if you add Google Analytics, Meta Pixel or similar.]

9. Changes

We may update this policy and will post the latest version on this page.

10. Contact

[Business registered name] (Social Brandits)
[Street address, City, Sri Lanka]
Email: hello@socialebrandits.com
WhatsApp / Phone: +94 70 000 0000