Privacy Policy

Last updated: 8 September 2026
Service: LesiSearch (personal project)
Privacy contact: diladws@gmail.com

This policy covers the LesiSearch website, mobile app, and related backend services. See also our Terms and Cookie Policy.

1. What Data We Collect

Depending on how you use LesiSearch, we may process:

• Account: email, password (via auth provider — not stored in plaintext), optional first/last name, optional phone number
• Alerts: search filters (make, model, location, type, year/price range), guest trial email
• Search: filters you submit for AI ranking
• Feedback: messages you submit via our feedback form (processed by Formcarry)
• Technical: IP address and request metadata on our servers; cookies/analytics if you consent (see Cookie Policy)

The mobile app does not request contacts, precise GPS, camera, microphone, SMS, or advertising ID permissions.

2. How We Use Data

• Provide search and AI ranking
• Create and manage accounts; send OTP / alert emails
• Secure the service (auth, abuse prevention, rate limiting)
• Operate and improve reliability
• Measure website usage only if you accept analytics cookies
• Comply with legal obligations when required

3. Third-Party Services

Mobile app binary: HTTP API client, secure token storage, image caching, Google Fonts (may fetch fonts from Google), in-app browser for listings, link opener. No advertising SDK, Crashlytics, or product-analytics SDK is embedded in the app.

Backend / website processors:

• Firebase Authentication / Google Identity Toolkit (sign-in)
• Email delivery (Brevo) for OTP and alerts
• Hosting / infrastructure (including Vercel) for API and website
• AI ranking provider (server-side) for listing rankings
• Formcarry for optional feedback submissions
• Google Analytics and Vercel Web Analytics on the website only after cookie consent

When you open a listing, third-party sites (e.g. ikman.lk, riyasewana.com) apply their own privacy practices.

4. Data Retention

• Account and profile data are kept until you delete your account
• Guest alert subscriptions are kept until they expire (~2 weeks), you cancel them, or they are removed
• Server logs may be retained for up to about 90 days for security and operations
• Email-provider delivery logs follow the provider’s retention settings
• Access tokens expire after a configured TTL on the backend

5. Your Rights

You may request access, correction, or deletion by emailing diladws@gmail.com, and/or using Profile → Delete account in the app or on the website.

Web deletion instructions: https://www.lesisearch.com/legal/#account-deletion

Cancel guest trial alerts: https://www.lesisearch.com/alerts/guest/cancel/

6. Children's Privacy

LesiSearch is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal data, contact diladws@gmail.com and it will be removed.

7. Where Data Is Processed

Data is processed to operate LesiSearch for users in Sri Lanka, using cloud hosting and the third-party processors listed above (which may process data in other regions).

8. Changes

This policy may be updated. The Last updated date above will change when updates are published.

9. Contact

Email: diladws@gmail.com
Website: https://www.lesisearch.com

This document is provided for general informational purposes and does not constitute legal advice.