Sri Lanka Privacy Policy

1. Scope

This policy applies to personal information handled by Figsor when you visit our website, create an account, join a waitlist, book or provide services, register a business, apply as a freelancer or gig worker, upload documents, contact support, receive communications, or use Figsor tools.

Some services may have additional terms or notices. If a service-specific notice conflicts with this policy, the more specific notice applies to that service.

For Sri Lanka users, this policy should be read with Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (PDPA) and any notices Figsor provides during account creation, verification, support, business onboarding, freelancer onboarding, gig worker onboarding, or payment workflows.

2. Information We Collect

Account and contact information

• Name, username, email address, phone number, password credentials, account identifiers, language, country, and region preferences.
• Profile details such as address, city, service preferences, role, business name, business ownership details, freelancer or gig worker profile information, and account status.

Customer, booking, and order information

• Service requests, bookings, delivery details, addresses, cart activity, order history, invoices, reviews, messages, support cases, and related communications.

Business, freelancer, and gig worker information

• Business registration details, store information, service listings, work eligibility, approvals, status history, payout profile details, onboarding records, and support notes.
• Documents or images uploaded for verification, compliance, service delivery, background checks, business review, or support review.

Location, device, and usage information

• Approximate or precise location when needed for service matching, delivery, booking, locale selection, safety, fraud prevention, or support.
• IP address, browser type, device identifiers, pages visited, timestamps, log data, session data, cookie identifiers, referral URLs, and app or website interactions.

Communications and support information

• Messages, emails, chat content, call or support request details, attachments, help center submissions, and internal notes needed to resolve issues.

3. How We Use Information

• To create, secure, verify, and manage accounts.
• To provide service booking, delivery, marketplace, freelancer, gig worker, business, support, and administrative features.
• To process orders, payments, refunds, invoices, payouts, platform fees, and finance reports.
• To verify documents, eligibility, business ownership, workforce status, and compliance requirements.
• To personalize language, country, region, content, and user experience.
• To send account, security, service, support, onboarding, marketing, and operational communications.
• To prevent fraud, abuse, unauthorized access, security incidents, and policy violations.
• To analyze and improve platform performance, reliability, safety, and product design.
• To meet legal, tax, accounting, regulatory, dispute, audit, and enforcement obligations.

Sri Lanka processing purposes

For Sri Lanka operations, Figsor may process personal data where it is needed to perform a service requested by you, support a contract or transaction, comply with legal or regulatory duties, protect platform security, manage disputes, support legitimate business operations, or based on your consent where consent is required.

4. How We Share Information

Figsor may share information only as needed for the purposes described in this policy, including with:

• Customers, businesses, freelancers, gig workers, or service providers involved in a booking, delivery, order, support case, or transaction.
• Payment processors, payout providers, fraud prevention services, email, SMS, hosting, storage, analytics, maps, and communication providers.
• Background check, document verification, compliance, accounting, legal, audit, and professional service providers where applicable.
• Internal Figsor teams and authorized administrators based on role, permission, country scope, and operational need.
• Authorities, regulators, courts, or law enforcement if required by law or needed to protect rights, safety, security, or platform integrity.
• A successor organization if Figsor is involved in a merger, financing, reorganization, sale, or transfer of assets.

Figsor does not sell personal information as a standalone product.

For Sri Lanka services, Figsor may share personal data with local operating, support, payment, verification, delivery, professional, and technology partners only where needed for the service, compliance, safety, support, or business purpose described in this policy.

5. Cookies and Similar Tools

Figsor uses cookies, local storage, pixels, and similar technologies to keep you signed in, remember choices, protect sessions, measure performance, understand usage, improve features, and support marketing or analytics where permitted.

You can use the cookie banner to allow all cookies, keep essential cookies only, or manage choices. You can also control cookies through your browser settings. Some essential features may not work correctly if required cookies are blocked.

For more detail, see the Cookie Policy.

6. Verification Documents

Figsor may collect and review documents for business registration, freelancer or gig worker onboarding, compliance, background checks, finance, support, and service delivery. These documents may contain sensitive personal or business information.

Access to document files is limited to the document owner and authorized internal roles with appropriate permissions and country scope. Figsor may log access to compliance documents for audit and security purposes.

7. Payments and Transactions

Figsor may collect transaction details, invoices, refund records, payout records, platform fee records, and limited payment-related identifiers. Payment card or bank details may be handled by payment providers, payout providers, or financial partners according to their own terms and privacy practices.

For Sri Lanka transactions, payment, payout, tax, invoice, refund, service fee, and business finance records may be processed to support Sri Lanka operations, account reconciliation, support reviews, and applicable legal or accounting duties.

8. Retention

Figsor keeps personal information only as long as reasonably needed for the purposes described in this policy, including providing services, maintaining accounts, resolving disputes, preventing fraud, meeting legal or tax obligations, preserving audit records, and enforcing agreements.

Retention periods may vary by information type, account status, transaction history, document category, country, and legal requirement. When information is no longer needed, Figsor will delete, anonymize, or securely archive it where appropriate.

9. Security

Figsor uses administrative, technical, and organizational safeguards designed to protect personal information. These may include authentication controls, role-based access, country-scoped admin access, audit logs, secure storage, encrypted transport, monitoring, and restricted document access.

No website, app, or storage system is completely secure. Please use strong passwords, keep account credentials private, and contact us if you believe your account or data has been exposed.

10. Your Choices and Rights

Depending on where you live, you may have rights to:

• Access personal information Figsor holds about you.
• Correct inaccurate or incomplete information.
• Request deletion, deactivation, or restriction where available.
• Withdraw consent for optional processing, such as marketing communications.
• Manage cookie choices and browser-level tracking controls.
• Ask questions or challenge Figsor's privacy practices.

Some information may be retained where required for legal, security, fraud prevention, tax, accounting, dispute, or operational reasons.

Sri Lanka data subject requests

If you are in Sri Lanka, you may have data subject rights under the PDPA, including rights to ask about personal data Figsor holds, request correction where information is inaccurate, withdraw consent where processing depends on consent, object or request limits where available, and raise a concern about how personal data is handled. Figsor may need to verify your identity before responding.

11. Children

Figsor is not intended for children under 13. We do not knowingly collect personal information from children under 13 without appropriate consent. If you believe a child has provided personal information to Figsor, please contact us.

12. International Operations

Figsor supports Sri Lanka operations as part of a region-based platform. Personal data from Sri Lanka may be processed in Sri Lanka and may also be processed or stored in Canada, the United States, India, the United Kingdom, or other countries where Figsor or its service providers operate.

Where Sri Lanka personal data is transferred or accessed across borders, Figsor uses contractual, technical, organizational, and access-control safeguards intended to protect that data and support lawful processing.

13. Contact

For privacy questions, access requests, correction requests, deletion requests, or concerns about how Figsor handles personal information, contact:

Figsor Technologies Inc.
Email: support@figsor.com
Website: figsor.com

Sri Lanka users may also contact the Data Protection Authority of Sri Lanka, which was established under Sri Lanka's Personal Data Protection Act, No. 9 of 2022.