Privacy Policy
Last updated: July 2026
DRAFT: pending counsel review. This document is a working draft and has not yet been reviewed by legal counsel. It will be replaced with the final reviewed version before general availability.
1. Information We Collect
Account details (name, email, phone), business information and documents submitted by Sellers (including registration certificates, statutory filings, and financial statements), buyer profile information, NDA signatures with IP addresses, and platform usage logs.
2. How We Use It
To operate the marketplace: verifying businesses, facilitating NDA-controlled access, preparing commissioned documents (IM, CIM, valuations), processing payments, and sending transactional notifications. We do not sell personal data to third parties.
3. Confidential Business Documents
Documents uploaded to a listing's data room are access-controlled. Confidential documents are visible only to the owning Seller and CapRaise's review team. Documents marked visible are shared only with Buyers whose access the Seller has approved after NDA execution. All data-room access is logged.
4. Retention
Identity and financial documents are retained for the duration of the listing plus the period required for legal compliance under Sri Lanka's Personal Data Protection Act. Documents connected to rejected or expired listings are scheduled for deletion.
5. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting privacy@capraise.lk, subject to legal retention obligations.
6. Security
Access to data is role-restricted and audited. NDA execution records include timestamp and IP address for enforceability.