1. Information We Collect
When you use WebDev LK, we collect the following types of information:
- Account information: Your name, email address, and password when you register.
- Social profile data: The profile URLs you provide (LinkedIn, GitHub, Instagram, Facebook, or other platforms), used solely to generate your website content. We store only the URLs you enter — we do not scrape or import data from these networks.
- Website content: Text, images, and data you add or request via our AI editing system.
- Usage data: Pages visited, features used, AI change requests, and interaction timestamps.
- Account activity: Login timestamps, used to operate our Free-plan inactivity policy described in the Terms of Service.
- Device and browser data: IP address, browser type, operating system, and device type for analytics and security.
- Communication data: Information you provide when contacting our support team.
2. How We Use Your Information
We use the collected information for the following purposes:
- To generate, host, and maintain your AI-built website
- To process AI content changes and updates you request
- To manage your account, subscription, and billing
- To provide customer support and respond to inquiries
- To operate and improve the Service using aggregated, non-identifying insights
- To send service-related communications (e.g., account updates, maintenance notices)
- To detect and prevent fraud, abuse, or security incidents
- To comply with legal obligations under Sri Lankan law
We process personal data in accordance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka.
We do not sell, rent, or trade your personal data, and we do not use your website content or personal
data to train AI models. Your data is used only for the purposes listed above — to provide the Service
to you — and never for unrelated purposes.
3. Cookies
WebDev LK uses cookies and similar tracking technologies to enhance your experience. We use:
- Essential cookies: Required for authentication, session management, and platform functionality.
- Preference cookies: Remember your language, dark mode, and other settings.
- Analytics cookies: Help us understand how you use the platform (see Section 8 below).
- You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.
4. Data Sharing
We do not sell, rent, or trade your personal data, and we do not use your website content or personal
data to train AI models. We may share your data only in the following circumstances:
- With your consent or at your direction
- With third-party AI providers (Ollama Cloud-hosted models, including DeepSeek) solely to process your website content generation requests
- With Google Analytics for aggregated, anonymised usage analytics (see Section 8)
- When required by law or to protect our legal rights
- In connection with a business transfer (merger, acquisition, or sale of assets)
5. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (TLS/SSL) and at rest
- Secure password hashing (bcrypt)
- Regular security audits and updates
- Access controls limiting internal personnel access to your data
- Automated SSL certificates for all hosted websites
6. Your Rights
Under applicable data protection laws, you have the right to:
- Access your personal data held by us
- Correct inaccurate or incomplete data
- Delete your account and associated data (subject to legal retention requirements)
- Export your website files in a portable format (available on the Pro plan)
- Object to certain data processing activities
- Withdraw consent at any time, though this may affect our ability to provide the Service
To exercise any of these rights, contact us at hello@kdj.lk. We will respond within 30 days.
You may also lodge a complaint with the Data Protection Authority of Sri Lanka under the Personal Data
Protection Act No. 9 of 2022.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service.
When you delete your account, your personal data is deleted promptly (including profile data, uploads,
and site files). Site backups held in our recovery trash are retained for up to 30 days after deletion
and then permanently erased. Usage and analytics logs are pruned automatically (page views older than
90 days, analytics and uptime logs older than 30 days, API logs older than 24 hours). Data may be
retained longer where required by Sri Lankan law.
8. Third-Party Services
WebDev LK uses the following third-party services:
- Ollama Cloud: Hosts the AI models (including DeepSeek models) used for generating and updating website copy. Data shared is limited to the content you request to create or modify.
- Google Analytics (G-C6T9NL2PEF): We use Google Analytics to collect anonymised usage statistics including page views, session duration, and traffic sources. This helps us improve the platform. Google Analytics uses cookies and may collect your IP address (anonymised). You can opt out via the Google Analytics opt-out browser add-on.
- KDJ chat widget: A live-chat support widget loaded from erp.kdj.digital on our marketing pages, used to answer your questions.
- Fonts (fonts.bunny.net): A privacy-friendly font CDN used to load the site's typography.
- Self-hosted analytics: We run our own privacy-friendly page-view analytics on websites hosted on webdev.lk, which records anonymised, hashed IP data.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated
"Last updated" date. For significant changes, we will notify you via email or a prominent notice on the
platform. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us: