PinLand Privacy Policy

1. Who we are

PinLand (pinland.lk) is a map-first property listing platform for Sri Lanka, operated as a sole-trader business registered in Sri Lanka. We connect property seekers with sellers, landlords, and verified agents across all 25 districts.

Questions about this policy: hello@pinland.lk

2. Information we collect

We collect only what is necessary to run the platform:

• Google account data — when you sign in with Google we receive your name, email address, and profile photo. We do not receive your Google password.
• Phone number — optionally provided for OTP verification and so interested parties can contact you about your listings. Your phone number is never displayed publicly without your consent.
• Listing content — property title, description, price, photos, and the GPS coordinates you pin on the map.
• Usage data — pages visited, listings viewed, search queries, and device/browser type, used for product analytics and security.
• Payment data — for bank-transfer payments we store your uploaded receipt and a reconciliation reference. For payments made via PayHere, we receive a PayHere transaction ID and payment status; we do not receive or store your card number, CVV, or internet-banking credentials — those are handled exclusively by PayHere.

3. How we use your information

• To create and manage your account and listings.
• To allow buyers and renters to contact you about your listed properties (your contact details are shared only when you choose to list).
• To verify your identity via OTP and mark agent accounts as verified.
• To process featured-listing payments and issue receipts.
• To improve platform features, fix bugs, and understand how the platform is used.
• To detect and prevent fraudulent listings, spam, or abuse.

We do not sell, rent, or trade your personal data to third parties. We do not use your data for advertising outside of PinLand.

4. Where your data is stored

Your data is stored with Supabase (PostgreSQL database and file storage) hosted on AWS infrastructure. The platform is deployed via Vercel. Photos are served via Supabase Storage and a content-delivery network. All data is encrypted in transit (TLS) and at rest. Payments processed through PayHereare handled on PayHere's own PCI-DSS compliant infrastructure in Sri Lanka and are governed by PayHere's Privacy Policy.

5. Data sharing

We share data only in the following limited cases:

• Service providers — Supabase, Vercel, Google (sign-in), Cloudflare (CDN/security), and PayHere (payment processing) process data on our behalf under their respective privacy policies. When you make a payment via PayHere, we share only the information necessary to initiate and verify the transaction (order reference, amount, your name and email).
• Legal obligation — if required by Sri Lankan law or a court order.
• Safety — to investigate fraudulent listings or protect the safety of users.

6. Cookies

We use a session cookie (set by Supabase Auth) to keep you signed in. We may use analytics cookies to understand platform usage. Disabling cookies will prevent sign-in and saved-listings features from working.

7. Your rights

You may at any time:

• Access — request a copy of the personal data we hold about you.
• Correct — update your profile or listing details directly in the platform.
• Delete — request deletion of your account and associated data. Active listings will be unpublished and your profile anonymised.
• Object — object to how we process your data.

To exercise any right, email hello@pinland.lk. We will respond within 30 days.

8. Data retention

We retain your account data for as long as your account is active. Expired listings are kept for 12 months for dispute resolution, then deleted. If you delete your account, your personal data is removed within 30 days; anonymised aggregate analytics may be retained indefinitely.

9. Children

PinLand is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account promptly.

10. Changes to this policy

We may update this policy as the platform evolves. Material changes will be announced in-app or by email. Continued use of PinLand after a change constitutes acceptance of the updated policy.

11. Governing law

This policy is governed by the laws of Sri Lanka. Any disputes arising from this policy will be subject to the jurisdiction of Sri Lankan courts.