Privacy Policy
Last updated: June 24, 2026
We take your privacy seriously. This policy explains what data we collect and why.
What we collect
- Phone number — required to verify sellers and contact buyers
- Name — shown on your listings
- District / city — to help buyers find local vehicles
- Listing details — make, model, photos, description, price, location pin
- Usage data — anonymous page views via Google Analytics
- IP addresses — for rate limiting and fraud prevention only
What we don't collect
- Email addresses (we use phone-only auth)
- Government IDs (NIC, passport)
- Credit card details (handled entirely by PayHere)
- Browsing history outside Siraa.lk
How we use your data
- To verify you as a real seller
- To display your listings to buyers
- To enable buyer–seller contact via WhatsApp or call
- To improve the platform (aggregate analytics only)
- To prevent fraud and abuse
What we share
We don't sell your data. We share information only with:
- Buyers — your name, phone, and listings (publicly visible)
- SMSLenz — phone number, to send OTP codes
- PayHere — name and phone, for payment processing
- Cloudflare — uploaded images, for storage
- Supabase — all listing data, for our database
- Law enforcement — only when required by Sri Lankan law
Location data
When you pin a location on the map for your ad, we store the exact GPS coordinates. Buyers see only a ~500m radius circle, not your exact spot. We do this to protect your privacy while still letting buyers know which neighbourhood the vehicle is in.
Image metadata
When you upload photos, we automatically strip EXIF data (camera model, GPS coordinates embedded in the file) before storing them. We do this for your safety.
Data retention
We keep your listings as long as your account is active. You can delete any listing at any time from your dashboard. If you want to delete your entire account, email us at hello@siraa.lk and we'll remove your data within 30 days.
Cookies
We use functional cookies for sign-in (session cookies) and Google Analytics for anonymous usage statistics. We don't use advertising cookies or third-party trackers.
Your rights
You can at any time:
- Edit or delete your listings
- Update your profile information
- Sign out from any device
- Request a copy of your data
- Request account deletion
Children
Siraa is not intended for users under 18. If you are under 18, please don't use the platform.
Contact
Questions or concerns? Email hello@siraa.lk.