Privacy Policy

Last updated 2026-10-10

This policy explains what personal data KadeBill("we") handles when you use KadeBill, why, and your rights under Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

1. Two kinds of data

• Your account data: the names, email addresses and passwords (stored only in hashed form) of the people who use KadeBill, and your business's details. For this we are the controller.
• Your business records: the invoices, customers, products and payments your business enters. Your business is the controller of this data; we process it only on your behalf, to provide KadeBill.

2. What we use it for

• Running KadeBill: signing you in, storing and showing your records, printing and exports.
• Account emails: verifying your address, password resets, invitations and important notices.
• Billing your license and support.
• Keeping KadeBill secure: logs of sign-ins and of sensitive actions, and limits on repeated attempts.

We don't sell personal data, and we don't use your business records for advertising.

3. Cookies

KadeBill uses only the cookies it needs to work: one that keeps you signed in, and one that identifies the computer so its printer alignment is remembered. We don't use advertising or tracking cookies.

4. Who else handles it

We use trusted service providers to host the application and database, store uploaded files (such as your logo), and send email. They process data only on our instructions. Some of them store data outside Sri Lanka; where they do, we rely on safeguards the Act allows. Ask us for the current list.

5. Security

Data is encrypted in transit, passwords are hashed, each business's records are kept separate from every other business at the database level, and only a small number of our staff can reach it, with their changes logged.

6. How long we keep it

We keep your records while your account is open, because businesses must keep invoices for their tax records. After an account is closed we keep the data for up to 90 days so it can be exported or restored, then delete it, except where the law requires us to keep something longer.

7. Your rights

You can ask to see, correct or delete your personal data, or object to how it is used, by writing to support@kadebill.com. If your request is about a business's customer records, we will pass it to that business, which decides. If you're not satisfied with our answer you can complain to the Data Protection Authority of Sri Lanka.

8. Changes

If we change this policy in a way that matters, we'll tell account owners by email or in the app.

9. Contact

Privacy questions: support@kadebill.com.