🔒 Privacy Policy

Last updated: October 2, 2026

Your privacy matters to us. This Privacy Policy explains what personal information Srieco.lk collects, how we use it, who we share it with, and how you can manage your data. By using our website, you consent to the practices described here.

1. Information We Collect

a. Information you provide directly

  • Account data — name, email address, password (hashed), user type (job seeker / employer).
  • Google account data (if you sign in with Google) — Google ID, name, email, profile picture.
  • Job application data — your name, email, phone, cover letter, and uploaded CV (PDF/DOC/DOCX).
  • Employer data — company name, logo, industry, address, contact details, job postings.
  • Profile data — optional bio, avatar, website, and other details you add.

b. Information collected automatically

  • IP address — used for spam prevention and analytics.
  • Browser and device info — user agent, screen size, operating system.
  • Usage data — pages visited, jobs viewed, search queries.
  • Cookies — small files used to keep you logged in and remember preferences.

c. What we do NOT collect

  • We do not collect payment card details (our service is currently free).
  • We do not collect government ID numbers or passport details.
  • We do not access your other files or applications on your device.

2. How We Use Your Information

We use your information to:

  • Create and manage your account.
  • Display job listings you post (for employers).
  • Forward your job applications and CV to the specific employer you applied to.
  • Send you emails about new applications, job postings, or platform updates.
  • Prevent spam, fraud, and abuse on the platform.
  • Analyse traffic and improve the user experience (via Google Analytics).
  • Respond to your support requests.

3. Who We Share Information With

We never sell your personal information. We only share it in these limited situations:

  • With employers you applied to — when you submit a job application, your name, email, phone, cover letter, and CV are visible to that specific employer.
  • With Google — if you sign in with Google, we receive your basic profile info via OAuth.
  • With Google Analytics — aggregated, anonymised data about site usage (no personal identification).
  • With our hosting provider — your data is stored on their servers.
  • With law enforcement — if required by law or to protect our rights.

Important: When you apply for a job, the employer sees your CV and contact details. Do not include information you are uncomfortable sharing.

4. Your CV and Application Data

  • Your CV is stored securely on our servers.
  • Only the employer of the job you applied to can download your CV.
  • Admins can view CVs for moderation purposes only.
  • CV files are stored outside the public web root and protected from direct access.
  • You can request deletion of your CV and application by emailing us.

5. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies — required to keep you logged in and secure your session.
  • Analytics cookies — Google Analytics 4 to understand how visitors use the site.
  • Preference cookies — store your saved jobs (in browser localStorage), filter choices, and display preferences.

You can disable cookies in your browser settings, but some features of Srieco.lk may stop working.

6. Data Security

We take reasonable measures to protect your data:

  • HTTPS encryption — all traffic to and from Srieco.lk is encrypted.
  • Password hashing — passwords are hashed using bcrypt before storage. We never see your plain password.
  • Google OAuth — we never see your Google password.
  • Secure CV storage — CV files are protected from direct public access.
  • Admin authentication — restricted access to sensitive data.

However, no website is 100% secure. We cannot guarantee absolute security, but we work hard to protect your information.

7. Your Rights

You have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Correction — update your data anytime via your Profile page.
  • Deletion — request deletion of your account and data.
  • Portability — request your data in a common format (CSV/JSON).
  • Withdraw consent — stop using our service anytime.
  • Complaint — contact us first; if not resolved, you may approach the relevant Sri Lankan authority.

To exercise any of these rights, email us at hello@srieco.lk.

8. How Long We Keep Your Data

  • Account data — retained until you delete your account.
  • Job posts — retained while active. Paused jobs are kept for record purposes.
  • Applications and CVs — retained for 12 months after submission for employer review.
  • Analytics data — aggregated, anonymised, retained up to 26 months (Google Analytics default).

9. Children's Privacy

Srieco.lk is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Third-Party Links

Our site may contain links to external websites (e.g. employer career pages, Google Forms). We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect immediately upon posting. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Srieco.lk after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions or requests, contact our team:

We aim to respond to all privacy-related requests within 30 days.

Questions about privacy?

We take your data seriously. Reach out with any concerns.

📧 hello@srieco.lk
User Agreement · FAQ · About Us