Legal

Privacy Policy

Last updated: 1 May 2026 · Effective immediately

inwestout.com ("we", "us", "our") is operated by Damith Priyadarshana, trading as DamithInvest, based in Sri Lanka. This policy explains what personal data we collect, why we collect it, and how we protect it. We are committed to handling your information responsibly and in compliance with Sri Lanka's Personal Data Protection Act No. 9 of 2022.

1. Who we are

Operator: Damith Priyadarshana (DamithInvest)
Website: inwestout.com
Contact: support@inwestout.com
Country: Sri Lanka

2. What data we collect and why

Data type	Why we collect it	Legal basis
Email address	To create and manage your account, send receipts, and communicate about your subscription	Contract performance
Payment details	Processed by PayHere — we do not store card numbers or bank details on our servers	Contract performance
PayHere transaction ID	For payment verification and refund processing	Contract performance
Usage data (pages visited, tools used)	To improve our tools and understand how visitors use the site. Collected anonymously via Cloudflare analytics.	Legitimate interest
PDF documents you upload	Processed in real time by the Quality-of-Earnings Analyzer. We do not store uploaded documents on our servers. Documents are sent to the Anthropic API for processing and discarded immediately.	Contract performance / user consent
IP address	Logged automatically by Cloudflare for security and traffic analysis. Not linked to personal identity.	Legitimate interest

3. What we do NOT collect

We do not collect or store credit card numbers, bank account details, or CVV codes — all payment processing is handled by PayHere
We do not sell your personal data to any third party
We do not use your data for advertising targeting
We do not use cookies for tracking or advertising — only essential session cookies

4. How we share your data

We share data only with the following service providers, strictly for the purpose of delivering our service:

PayHere (payhere.lk) — payment processing. PayHere's own privacy policy applies to payment data.
Anthropic (anthropic.com) — PDF documents you upload to the analyzer are sent to Anthropic's Claude API for processing. Anthropic's privacy policy and data retention rules apply. Documents are processed transiently and not retained by Anthropic beyond their standard API data handling policy.
Cloudflare (cloudflare.com) — our website infrastructure, DNS, and analytics. Cloudflare may process IP addresses and request metadata.
Vercel (vercel.com) — website hosting. Standard web server logs may be retained per Vercel's policy.

We will disclose personal data to law enforcement or regulatory authorities only when required by law.

5. Data retention

Account data — retained for as long as your account is active, plus 1 year after closure for accounting purposes
Payment records — retained for 7 years as required by Sri Lankan tax and accounting regulations
Uploaded documents — not retained. Processed transiently and discarded immediately after analysis
Usage analytics — aggregated and anonymous, retained indefinitely

6. Your rights

Under Sri Lanka's Personal Data Protection Act, you have the right to:

Access — request a copy of personal data we hold about you
Correction — request correction of inaccurate personal data
Deletion — request deletion of your account and associated personal data (subject to legal retention requirements)
Portability — receive your data in a machine-readable format
Object — object to processing based on legitimate interest

To exercise any of these rights, email support@inwestout.com with your request. We will respond within 14 days.

7. Security

We implement appropriate technical and organisational measures to protect your personal data, including HTTPS encryption for all data in transit, access controls limiting who can access subscriber data, and use of reputable third-party infrastructure providers (Cloudflare, Vercel) with their own security certifications.

No internet transmission is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately at support@inwestout.com.

8. Cookies

inwestout.com uses only essential cookies required for site functionality (e.g. session management for logged-in subscribers). We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

9. Third-party links

Our research pages may contain links to external sources (CSE filings, news articles, company websites). We are not responsible for the privacy practices of those external sites.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. For material changes, we will notify active subscribers by email.

Privacy questions or requests?

Contact our data controller: support@inwestout.com
Damith Priyadarshana (DamithInvest) · inwestout.com · Sri Lanka