Privacy Policy
This policy explains how Instafixd collects, uses, and protects your personal information. Please read it carefully before using our platform.
1. Who We Are
Instafixd is a digital marketplace platform based in Sri Lanka that connects customers with verified local service providers. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform — whether as a customer or a registered service provider. By using Instafixd, you agree to the practices described in this policy.
2. Information We Collect
We collect information that is necessary to operate the platform and verify the identity of service providers. For service providers, this includes: • Full name, mobile number, and email address (optional) • National Identity Card (NIC) number and NIC scan/photo • Police clearance certificate document • A selfie/profile photo for identity verification • Portfolio photos, PDFs, or ZIP files showcasing your work • Service categories you offer and the geographic zones you cover • Your weekly availability schedule For all users, we also collect: • Device and browser information for security and fraud prevention • Usage data such as pages visited and features used (via analytics) We do not collect passwords. Authentication is handled exclusively via a one-time passcode (OTP) sent to your registered mobile number.
3. How We Use Your Information
We use your information to: • Verify your identity and eligibility to operate as a service provider • Send OTP codes to authenticate your mobile number during login and registration • Match customers with relevant service providers based on category, location, and availability • Display your profile, ratings, and reviews to potential customers • Process platform commission charges and subscription fees • Communicate important service updates, policy changes, or account notices • Investigate complaints or disputes involving your account • Improve platform performance through anonymised usage analytics
4. How We Share Your Information
We do not sell your personal data to third parties. We share information only in the following circumstances: • With customers: Your public profile (name, service category, zone, ratings) is visible to customers searching for providers. Sensitive documents such as NIC scans and police clearances are never shown to customers. • With our SMS provider (text.lk): Your mobile number is shared solely to deliver OTP verification messages. • With Supabase (our cloud infrastructure): All data is securely stored on Supabase servers hosted in the Asia-Pacific region. Supabase processes data on our behalf under strict data protection agreements. • With authorities: We may disclose information if required by Sri Lankan law, court order, or to protect the safety of users on the platform.
5. Document Storage and Security
Identity documents (NIC scans, police clearance certificates, selfies) and portfolio files are stored in a secure, access-controlled cloud storage system (Supabase Storage). These files are: • Accessible only by Instafixd's authorised internal team for verification purposes • Never publicly listed or indexed • Retained for as long as your account is active, plus 12 months after account closure for compliance purposes We use industry-standard encryption in transit (TLS) and at rest to protect your documents and data.
6. Data Retention
We retain your personal data for as long as your service provider account remains active. If you request account deletion, we will remove your personally identifiable information within 30 days, except where retention is required by law (e.g., financial transaction records, which may be retained for up to 7 years in accordance with Sri Lankan regulations). OTP codes are discarded immediately after successful verification or after a 5-minute expiry window, whichever comes first. They are never stored permanently.
7. Your Rights
You have the right to: • Access the personal information we hold about you • Request correction of inaccurate or incomplete data • Request deletion of your account and associated personal data • Withdraw consent for non-essential communications at any time • Lodge a complaint with the relevant data protection authority in Sri Lanka To exercise any of these rights, contact us at privacy@instafixd.lk. We will respond within 14 business days.
8. Cookies and Analytics
Instafixd uses minimal cookies required for session management and authentication. We also use Vercel Analytics to collect anonymised, aggregated usage statistics (no personally identifiable information is included in analytics data). You can disable non-essential cookies through your browser settings at any time.
9. Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will notify registered service providers via SMS or a notice on the platform. The "Last updated" date at the bottom of this page will always reflect the most recent revision. Continued use of Instafixd after a policy update constitutes your acceptance of the revised policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out to us: Instafixd Pvt Ltd Sri Lanka Email: contact.instafixd@gmail.com
Last updated: May 2025 · Instafixd Pvt Ltd, Sri Lanka