Privacy Policy

1. Scope of this Policy

This policy governs personal data handled through our corporate website and general business discussions.

Important Separation: The company-owned Aspirev Career-Intelligence Product operates under distinct product privacy requirements covering user resume processing, skill gap analysis, and application tracking. Specific client projects are governed by written service statements of work and confidential non-disclosure terms.

2. Information We Collect

Depending on how you interact with us, we may collect:

• Contact & Inquiry Data: Your name, email address, business name, phone/WhatsApp number, requested service, and message content.
• Project Scope Details: Business goals, timeline requirements, architectural preferences, and design assets voluntarily submitted for review.
• Technical Information: Standard server access logs including IP address, browser type, referring page, and security event timestamps.
• Communication Records: Written exchanges via email (hello.aspirev@gmail.com), WhatsApp, or scheduled video consultations.

*Please do not submit sensitive passwords, credit card numbers, or proprietary medical records through our public contact form.

3. Purpose & Legal Basis for Processing

We process your information solely for legitimate business purposes:

4. Responsible AI & Data Minimization

We treat client intellectual property and data with strict discipline. When integrating AI or machine-learning capabilities for clients:

• We never use client proprietary data or private materials to train general commercial AI models.
• We select vendors offering explicit zero-retention or enterprise data-protection commitments.
• Human review is prioritized whenever algorithmic workflows interact with decision-critical processes.

5. Legal Compliance & International Transfers

Our data practices are informed by Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (amended by No. 22 of 2025; scheduled provisions from January 2027) and international privacy standards (including GDPR principles for European clients).

We do not sell, rent, or trade your personal information. Any data transfers to cloud service providers (such as AWS, Vercel, or Google Workspace) are safeguarded under standard contractual privacy commitments.

6. Data Retention & Your Rights

General inquiries that do not proceed to a commissioned project are safely deleted or anonymized within 12 months. Client project records are retained only as required by contractual warranty and local tax accounting legislation.

You have the right to request access, correction, or deletion of your personal data held in our systems. To exercise these rights, please email us directly with the subject line “Privacy Request”.