Privacy Policies
Last Updated: October 2026 • Committed to transparent, secure data handling
1. Information We Collect
When you use Ecomm Software Solutions as a merchant or interact with an active storefront, we collect:
- Merchant Account Data: Name, business phone number, email address, password hashes (Argon2 / bcrypt), and billing records.
- Storefront Customer Order Data: Customer name, shipping addresses, delivery contact numbers, and order items.
- Technical Metadata: IP addresses, browser types, HTTP access latency, and anonymized diagnostic logs.
2. How We Use Information
We process data strictly to deliver and improve our cloud commerce software:
- To maintain active store routing, checkout calculation, and inventory synchronizations.
- To send transactional SMS and email notifications (OTP verification, order confirmations).
- To prevent fraudulent chargebacks, bot attacks, and denial of service events.
3. Data Security & Storage
All customer and merchant credentials are stored in enterprise-grade PostgreSQL databases hosted in secure Asian cloud regions. All transit data is strictly encrypted using TLS 1.3 / HTTPS. Payment proofs are stored in private Cloudflare R2 object storage with time-limited signed URLs.
4. Payment Information
We do not store raw credit card numbers or CVV codes. All card processing is handled directly by verified local payment gateways (such as PayHere) complying with PCI-DSS standards.
5. Merchant Ownership & Data Portability
Merchants own their store catalog and customer rosters. You may request a complete export of your product and order data at any time by contacting our engineering desk at hello@ecomm.lk.