Privacy Policy

1. What We Collect

• Account information: name, email address, password (stored hashed, never in plain text), and your chosen plan.
• Portfolio content: whatever you add to your portfolio — bio, work history, education, skills, project descriptions, and contact details. Each contact method (email, phone, social link, etc.) has its own public/private visibility setting that you control.
• Uploaded files: profile photos, and — on plans that include it — a static HTML/CSS/JS bundle for your portfolio.
• Payment-related records: if you pay by bank transfer, the payment slip image you upload as proof of payment; billing history (plan, amount, status, date).
• Analytics: anonymized view statistics for your published portfolio (see Section 2).

2. How Our Analytics Works

When someone views your published portfolio, we record a visit for your analytics — but we do not store the visitor's raw IP address anywhere. Instead, we compute a one-way hash from the visitor's IP address, browser, the current date, and a private application key, and store only that hash. Because the date is part of the hash, the same visitor produces a different hash every calendar day — the hash cannot be reversed back into an IP address, and it cannot be used to track a visitor across multiple days. Alongside the hash we record only: traffic source, device type, and whether a PDF was downloaded.

3. Third-Party Processors

• Anthropic (Claude API): if you use an AI-assisted feature (bio rewriting, skill suggestions, LinkedIn-import parsing), the text you submit for that feature is sent to Anthropic for processing. Don't submit information you wouldn't want a third party to process.
• PayHere: if you pay by card, your payment is processed directly by PayHere, a licensed Sri Lankan payment gateway — we do not receive or store your card number.

4. Data Export & Deletion — current status

Honest disclosure: there is no self-service "export my data" or "delete my account" button in your account settings today. To request a copy of your data or to have your account deleted, contact us at hello@about-me.lk and we will process the request manually. We do not currently run an automated process that anonymizes personal data after a fixed period following deletion. If self-service export/deletion or automatic anonymisation is added in the future, this page will be updated to describe the real behavior at that time.

5. Cookies & Sessions

We use a session cookie to keep you signed in, backed by a database-stored session record with roughly a two-hour inactivity lifetime. We don't use third-party advertising or tracking cookies.

6. Public Portfolios & Search Engines

When you publish a portfolio, business card, or PDF, its content (excluding any contact field you've explicitly marked private) becomes accessible to anyone with the link and may be indexed by search engines. We have no control over third-party caching once a page has been crawled — unpublishing on the Platform does not retroactively remove a cached copy elsewhere.

7. Children's Privacy

The Platform is intended for users 18 and older, or 13-17 with a parent or legal guardian's consent. We do not knowingly collect information from children under 13.

8. Your Rights & Contact

You can review and correct most of your own information directly from your account settings and portfolio editor at any time. For anything else — including a data export or deletion request per Section 4 — contact hello@about-me.lk.

9. Changes to This Policy

We may update this Privacy Policy from time to time; the date at the top of this page reflects the last update.