Privacy Policy

1. Introduction

This Privacy Policy explains how AutoMera Technologies (Pvt) Ltd (registered in Sri Lanka) and AutoMera Technologies LLC (registered in the United States) — together referred to as "AutoMera", "we", "us", or "our" — collect, use, store, and protect information when you use our website at automera.lk, our automation platform, or any related services.

By using our services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

2.1 Information you provide directly

• Account information: name, work email, company name, role, phone number
• Billing information: handled by our PCI-DSS-compliant payment processor — we do not store card numbers
• Content you upload: workflows, documents, process data used within the platform
• Communications: messages you send to our sales or support teams

2.2 Information collected automatically

• Usage data: pages visited, features used, session duration
• Device data: browser type, operating system, IP address
• Cookies and similar technologies: for session management and analytics

2.3 Information from third parties

We may receive information from authentication providers (e.g., SSO), payment processors, and analytics services you or your organization has authorized.

3. How We Use Your Information

• Provide, operate, and improve the Automera platform
• Process transactions and send billing-related communications
• Respond to support requests and enquiries
• Send product updates, security notices, and (with consent) marketing communications
• Detect, prevent, and address fraud, abuse, and security incidents
• Comply with legal obligations in Sri Lanka, the United States, and other applicable jurisdictions

4. Legal Bases for Processing (GDPR)

Where the EU General Data Protection Regulation applies, we process personal data on the following legal bases:

• Contract: to deliver the services you've signed up for
• Legitimate interests: to improve our product, prevent fraud, and secure our systems
• Consent: for marketing emails and optional analytics cookies
• Legal obligation: to comply with tax, accounting, and regulatory requirements

5. Sharing Your Information

We do not sell your personal data. We share information only with:

• Service providers: hosting, payment processing, email delivery, analytics (all bound by data processing agreements)
• Your organization's administrators: if you use Automera through a company account
• Legal authorities: when required by law, court order, or to protect our legal rights
• Successor entities: in the event of a merger, acquisition, or asset sale

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. After account closure, we retain limited data for up to 7 years to comply with accounting, tax, and legal obligations. Backup copies are purged on a rolling schedule.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion ("right to be forgotten")
• Object to or restrict certain processing
• Request data portability in a machine-readable format
• Withdraw consent at any time (for consent-based processing)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@automera.lk. We respond within 30 days.

8. International Data Transfers

AutoMera operates from Sri Lanka and the United States. Data may be transferred to and processed in either location. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses and other approved safeguards.

9. Security

We protect your data using encryption in transit (TLS 1.3), encryption at rest, role-based access controls, regular security audits, and least-privilege access practices. See our Security page for full details.

10. Cookies

We use:

• Essential cookies: required for login sessions and core features
• Analytics cookies: to understand how visitors use the site (optional)
• Preference cookies: to remember your settings

You can disable non-essential cookies in your browser settings at any time.

11. Children's Privacy

Automera is a business-to-business platform. We do not knowingly collect personal data from children under 16. If we learn that we have, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email and on this page at least 30 days before they take effect. The "Last updated" date at the top reflects the latest revision.

13. Contact Us

For any privacy-related questions or requests:

• Sri Lanka: AutoMera Technologies (Pvt) Ltd, 42 Lakeview Gardens, Nawala, Sri Lanka · +94 11 528 6417
• USA: AutoMera Technologies LLC, 1180 Peachtree Street NE, Suite 2400, Atlanta, GA 30309, USA · +1 404 555 2861
• Email: privacy@automera.lk