Legal

Privacy Policy

How Maaruwak.lk collects, uses, shares, and protects your information.

Privacy Policy - Maaruwak.lk

Last Updated: March 27, 2026

Welcome to Maaruwak.lk ("Maaruwak", "we", "us", "our"). This Privacy Policy explains how we collect, use, share, and protect information when you use our website, mobile website, and related services (the "Platform").

By using the Platform, you agree to this Privacy Policy.

1) Who We Are

Maaruwak.lk is the data controller for personal data processed through the Platform.

Privacy contact: dev.maaruwak@gmail.com

2) Scope

This Privacy Policy applies to:

  • Visitors browsing Maaruwak.lk
  • Registered users who create accounts
  • Users who post advertisements, manage favourites, send swap offers, and use chat/messages

It does not apply to third-party websites or services that you access through external links.

3) Information We Collect

3.1 Information you provide

Depending on how you use the Platform, you may provide:

  • Account information: username, email, mobile number, password
  • Verification information: OTP inputs and verification outcomes
  • Profile information: first name, last name, email, mobile number, verification status
  • Advertisement data: title, description, category/subcategory, condition, price, negotiable flag, district, city, swap options, images
  • Favourites activity: advertisements you save to favourites
  • Swap-offer activity: offer content and user-to-user chat messages
  • Support communications and reports you submit

3.2 Information collected automatically

We may collect technical and usage data, including:

  • Device/browser details
  • IP address
  • Access timestamps and logs
  • Page usage and error logs

3.3 Cookies and session technology

We use cookies and similar technologies needed for authentication and session continuity. For example, a secure refresh-token cookie is used to help keep users signed in.

3.4 Information we do not intentionally collect

  • We do not intentionally collect payment card details through this Platform.
  • Please do not share sensitive data (such as bank credentials or national ID numbers) in listings or chat messages.

4) How We Use Information

We use personal data to:

  1. Operate core platform features (registration, login, account management, posting ads, favourites, swap offers, chat)
  2. Verify users and secure accounts (OTP verification, password reset, account security checks)
  3. Show and rank advertisements according to user-selected filters and sorting options
  4. Provide seller contact reveal functionality when users intentionally request contact details
  5. Monitor abuse, fraud, spam, and policy violations
  6. Troubleshoot issues, improve reliability, and enhance features
  7. Comply with legal obligations and enforce our Terms and safety rules

5) Legal Bases (Plain Language)

Depending on the context, we process personal data because:

  • It is necessary to provide the service you requested
  • You gave consent where required
  • We have legitimate interests in platform safety, fraud prevention, and service improvement
  • We need to comply with legal obligations

6) How Information Is Shared

6.1 Shared with other users

Some information is visible to other users as part of normal platform use, such as:

  • Public advertisement details (title, description, location area, images, condition, and pricing)
  • Swap-offer and chat content shared between participating users
  • Seller contact details only after a user actively selects the contact reveal action on an ad

6.2 Shared with service providers

We may share data with trusted processors that help us run the Platform, such as:

  • Cloud hosting and infrastructure providers
  • Image/media delivery providers
  • SMS/OTP delivery providers
  • Monitoring and analytics tools

These providers are permitted to process data only for service delivery to Maaruwak.lk.

6.3 Shared for legal reasons

We may disclose information if required to:

  • Comply with law or lawful requests
  • Investigate fraud, abuse, or security incidents
  • Protect users, Maaruwak.lk, or the public

6.4 Business transfers

If Maaruwak.lk is involved in a merger, acquisition, reorganization, or asset transfer, data may be transferred subject to applicable safeguards.

7) Your Choices and Controls

You can:

  • Update account/profile details through account settings
  • Change your password through account settings
  • Deactivate your account through account settings
  • Manage favourites from your account

Where optional communications are introduced in the future, opt-out controls will be provided.

8) Messaging and Swap Communication

The Platform currently supports user-to-user messaging within swap offers.

  • Swap offers and messages are normally visible to the sender and receiver participating in that swap request
  • Messages are stored server-side and are not end-to-end encrypted
  • Messages are processed to deliver communication and to support safety and abuse handling
  • Authorized admins/staff may access swap-offer and message content when needed for abuse reports, safety, moderation, support, legal compliance, or policy enforcement
  • Swap-offer and message content may be retained as described in the Data Retention section of this Privacy Policy
  • Do not share sensitive information such as passwords, OTPs, or financial credentials

Until in-app reporting is available, you can report inappropriate swap offers or messages by emailing dev.maaruwak@gmail.com with relevant details such as screenshots, the advertisement URL, swap request reference, date/time, and a short description of what happened.

9) Data Retention

We retain data only as long as reasonably necessary for the purposes described in this policy, including:

  • Account and profile records while your account is active, and for a limited period after deactivation where required for legal, security, or dispute reasons
  • Advertisement, favourites, and swap-offer records for operations, fraud prevention, audits, and enforcement
  • Technical and security logs for service reliability and incident investigation

When data is no longer needed, we delete or anonymize it where practical.

10) Data Security

We use reasonable technical and organizational safeguards, including access control and security monitoring.

No system is completely secure. You are responsible for maintaining password confidentiality and not sharing OTP codes.

11) International Processing

Our providers or infrastructure may process data outside Sri Lanka. When this happens, we apply reasonable safeguards appropriate to the transfer.

12) Children's Privacy

Maaruwak.lk is not intended for users under 18. If you believe a minor has provided personal data, contact us so we can review and take appropriate action.

13) Third-Party Links

The Platform may include links to third-party websites. Their privacy practices are governed by their own policies, not this one.

14) Your Rights

Subject to applicable law, you may request:

  • Access to personal data we hold about you
  • Correction of inaccurate data
  • Deletion of data (subject to retention/legal obligations)
  • Withdrawal of consent where consent is the legal basis

To make a request, contact: dev.maaruwak@gmail.com

We may need to verify your identity before fulfilling requests.

15) Future Features and Policy Updates

Maaruwak.lk is evolving. Some features may be introduced or expanded over time (for example, additional communication or account controls). If that changes how we process personal data, this policy will be updated.

We may update this policy from time to time. Material updates will be reflected by changing the "Last Updated" date and, where appropriate, by in-platform notice.

16) Contact

If you have privacy questions or complaints, contact: