Privacy Policy
In short
- We keep the details you give when you sign up, your plan, and what is needed to take payment. We never see your card details.
- We don't collect or store your building models or analysis results.
- We send marketing emails only if you ask for them, and we never sell your details.
- You can delete your account yourself at any time in LPCAD (click your name at the top of the app), and see, correct or delete your details by writing to lpcad.support@gmail.com.
1. Who is responsible for your data
Sooriyaarachchige Don Manuja Shamith Gunawardana, 128/14, Munamalgaha Waththa, Honnanthara South, Piliyandala, Sri Lanka, runs LPCAD and is responsible for the personal data described here. Contact: lpcad.support@gmail.com.
We handle personal data in line with the Personal Data Protection Act, No. 9 of 2022, of Sri Lanka, and with other data protection laws that apply to you.
2. What we collect
| Data | Where it comes from | Why we use it |
|---|---|---|
| Name, email address and password | You, at sign-up | To create your account and let you log in. The password is stored only in a form that cannot be turned back into the password. |
| Country | You, at sign-up | To offer the right payment options and to understand where LPCAD is used. |
| Company, role and phone number (optional) | You, at sign-up | To understand who uses LPCAD and, for the phone number, to contact you about your account if email fails. |
| Your choice about product emails, and when you accepted these terms | You, at sign-up | To send product news only with your consent, and to keep a record of your agreement. |
| Plan and subscription status, Lemon Squeezy, PayPal or PayHere subscription reference, payment dates and amounts | Lemon Squeezy, PayPal or PayHere, when you subscribe | To provide Pro, manage renewals and cancellations, and keep the records tax law requires. |
| Support messages: your name, email, the topic and what you write, your plan and browser type | You, on the Support page or by email | To answer you and to improve LPCAD. |
| Technical records: IP address, browser type, times of access | Your browser, automatically | Kept briefly by our hosting and account providers to run the service securely and prevent abuse. |
What we don't collect
- Your designs. Buildings you draw or import, analysis results and reports are not sent to us or stored on our servers.
- Card or bank details. Payments are made on Lemon Squeezy, PayPal or PayHere; we never receive your card details.
- Tracking. We don't use advertising trackers or analytics cookies.
3. Storage in your browser
LPCAD saves your login session and your current drawing in your browser's local storage so you stay logged in and don't lose your work. This is needed for LPCAD to work, and it stays on your device. Logging out removes the session; clearing your browser's site data removes both.
4. Our legal grounds
- Providing the service you signed up for: your account, plan and payments.
- Legal duties, such as keeping payment records.
- Legitimate interests: keeping LPCAD secure and understanding, in general terms, who uses it.
- Your consent for product emails. You can withdraw it at any time.
5. Who we share data with
We use these service providers, who process data for us under contract and only for the purposes above:
- Supabase: account database and login, with data held in Singapore (Supabase's Southeast Asia region). Supabase prepares the account emails, such as confirmation and password reset links.
- Google (Gmail): sends those account emails from lpcad.support@gmail.com, and holds the emails you send us.
- Cloudflare: website hosting and security.
- PayPal: subscriptions and payments. PayPal is responsible for the payment details you give it, under its own privacy policy. PayPal tells us your subscription number, its status, your payment dates and amounts and the email of your PayPal account, which we keep with your LPCAD account.
- Lemon Squeezy (Lemon Squeezy, LLC, USA): our reseller for card subscriptions. When you subscribe through it, it collects your payment details and billing address under its own privacy policy. It tells us your subscription number, its status, payment dates and amounts and your email.
- PayHere (PayHere (Pvt) Ltd, Sri Lanka): card payments in Sri Lanka. When you pay through PayHere we give it your name, email, mobile number, address and city, which it needs for the card payment; PayHere is responsible for your card details under its own privacy policy. PayHere tells us your subscription number, its status and your payment dates and amounts.
- Bank transfers: if you pay by bank transfer, we see the details your bank shows us (your name, the amount, date and reference) and keep them with your account as a payment record.
- Other email services: if we move account emails to a dedicated email service, or start sending the product emails you asked for, we will name that service here before it is used.
We don't sell or rent your personal data. We share it with others only if the law requires us to, or to protect our rights or someone's safety.
6. Data sent outside Sri Lanka
Our providers store and process data in other countries, including Singapore, the USA (Lemon Squeezy) and the countries where Cloudflare, Google and PayPal operate. PayHere processes payments in Sri Lanka. We use providers that protect personal data with contractual and security safeguards.
7. How long we keep data
- Account details: while your account is open. When you delete your account in LPCAD, these details are deleted at once; when you ask us to, we delete them within 30 days.
- Payment records: for as long as tax and accounting law requires, even after the account is deleted.
- Support messages: up to 2 years after the last reply, so we can follow up on earlier questions; sooner if you ask us to delete them.
- Technical records: kept by our providers for short periods, usually weeks.
8. Your rights
You can ask us to:
- give you a copy of the personal data we hold about you;
- correct details that are wrong;
- delete your account and your details;
- stop product emails (use the link in any product email, or write to us);
- stop or limit other uses of your data where the law allows.
Write to lpcad.support@gmail.com. We will reply within one month. If you are not satisfied, you can complain to the Data Protection Authority of Sri Lanka or to the data protection authority where you live.
9. Security
Connections to LPCAD are encrypted (HTTPS). Passwords are never stored in readable form, and each person can read only their own account details. No system is completely secure; if a breach affects your data, we will tell you and the authorities as the law requires.
10. Children
LPCAD is for professional use by adults. We don't knowingly collect data from anyone under 18.
11. Changes to this policy
If we change this policy in a way that matters, we will tell you by email or in LPCAD before the change takes effect. The version date is at the top of this page.
12. Contact
Sooriyaarachchige Don Manuja Shamith Gunawardana
128/14, Munamalgaha Waththa, Honnanthara South, Piliyandala, Sri Lanka
lpcad.support@gmail.com