Privacy Policy

At WealthWhisper, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy is in compliance with the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA).

1. Information We Collect

Personal Information:

• Name and email address (account registration)
• Portfolio and stock holdings data
• Watchlist preferences
• Communication preferences

Automatically Collected:

• Device information (browser, IP address)
• Usage data and analytics
• Local storage for session management

2. How We Use Your Information

We use your information to:

• Provide and improve our services
• Personalize your experience
• Send market alerts and notifications
• Process your registration and account management
• Provide customer support
• Comply with legal obligations

3. Data Sharing & Disclosure

We may share your data with:

• Service Providers: Third parties who help us operate our platform
• Market Data Providers: For providing real-time CSE stock information
• Legal Requirements: When required by Sri Lankan law or government authorities

We do not sell your personal data to third parties.

4. Data Protection (PDPA Compliance)

In accordance with Sri Lanka's Personal Data Protection Act No. 9 of 2022:

• We collect data only for specified, legitimate purposes
• Data is kept accurate and up-to-date
• We implement appropriate security measures
• Data is retained only as long as necessary

5. Your Rights Under PDPA

You have the right to:

• Right to be Informed: Know how your data is used
• Right to Access: Request a copy of your personal data
• Right to Correction: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Object: Object to certain processing
• Right to Data Portability: Request your data in a portable format

6. Security Measures

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and employee training

7. Local Storage

We use local storage to manage your session and improve your experience. You can clear local storage through your browser settings.

8. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Data Controller Contact

For any data protection inquiries or to exercise your rights, please contact us:

12. Lodging a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Data Protection Authority of Sri Lanka.