Oriax Technologies (we) operates EveryRupee, a personal expense tracking service delivered via WhatsApp. We are a registered company in Sri Lanka. This Privacy Policy explains what information we collect, why we collect it, and how we protect it when you use EveryRupee.
By messaging EveryRupee on WhatsApp, you agree to the practices described in this policy. Please read it carefully.
When you use EveryRupee, we collect only the data required to provide the service:
| Data Type | Examples | Why Collected |
|---|---|---|
| WhatsApp identity | Phone number, display name | To identify your account and deliver responses |
| Expense messages | Amounts, categories, descriptions you type | Core service — logging and summarising expenses |
| Usage data | Timestamps of messages, command frequency | Service reliability and feature improvement |
| Device & region | Language/locale (if shared by Meta) | Formatting currency and date displays correctly |
We do not collect passwords, payment card numbers, national identity numbers, or any sensitive personal data beyond what you voluntarily share in your expense messages.
Your data is used solely to operate and improve EveryRupee:
- Logging and categorising the expenses you submit via WhatsApp
- Generating your weekly and monthly expense summaries
- Sending you reports, reminders, and alerts you request
- Diagnosing technical issues and improving service reliability
- Complying with applicable laws and regulations in Sri Lanka
We do not use your data for advertising, profiling, or any purpose unrelated to providing the EveryRupee expense tracking service.
EveryRupee is delivered through the WhatsApp Business API, operated by Meta Platforms, Inc. When you message EveryRupee:
- Your messages are transmitted through Meta's infrastructure and subject to WhatsApp's Privacy Policy
- Meta may collect metadata (e.g., message timestamps, device type) in accordance with their own terms
- End-to-end encryption applies to personal WhatsApp chats; Business API messages may be stored on Meta's servers
- We receive only the message content and basic sender information that Meta forwards to us
We encourage you to review Meta's privacy policies independently to understand how they process your data on their platform.
Oriax Technologies does not sell, rent, or trade your personal data. We may share information only in these limited circumstances:
- Service providers: Trusted third-party vendors (e.g., cloud hosting, database services) who process data on our behalf under strict data-processing agreements
- Legal obligations: When required by Sri Lankan law, a court order, or to protect the rights and safety of our users or the public
- Business transfers: If Oriax Technologies is acquired or merged, data may be transferred — we will notify you and this policy will continue to apply
- With your consent: Any other sharing only occurs with your explicit prior consent
We retain your expense data for as long as your EveryRupee account is active, plus a reasonable period afterward to allow you to retrieve historical reports.
- Active account data is retained for the duration of your use of the service
- Upon account deletion or opt-out, your personal data is deleted or anonymised within 30 days
- Aggregated, anonymised analytics data (with no link to you personally) may be retained longer for service improvement
- We may retain certain data longer where required by Sri Lankan law
We implement industry-standard technical and organisational measures to protect your information:
- Data encrypted in transit (TLS/HTTPS) and at rest
- Access to personal data restricted to authorised personnel only
- Regular security reviews and monitoring
- Secure cloud infrastructure with access controls and audit logs
No method of transmission over the internet is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security. If you become aware of a security concern, please contact us immediately.
You have the following rights regarding your personal data held by Oriax Technologies:
Access
Request a copy of the personal data we hold about you
Correction
Ask us to correct inaccurate or incomplete data
Deletion
Request erasure of your data (right to be forgotten)
Opt-Out
Stop using EveryRupee at any time by messaging "STOP"
Portability
Receive your data in a machine-readable format
Restriction
Request we limit how we process your data
To exercise any of these rights, please contact us using the details in the Contact section below. We will respond within 14 business days.
EveryRupee is intended for users aged 18 and above. We do not knowingly collect personal information from children under 18.
If you believe a minor has used EveryRupee and shared their data with us, please contact us immediately and we will take steps to delete that information promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes:
- The updated policy will be posted on our website with a revised effective date
- We will notify active EveryRupee users via WhatsApp for significant changes
- Continued use of EveryRupee after notification constitutes acceptance of the updated policy
We encourage you to review this page periodically. The current version is always available at the URL of this page.
Questions? We're here to help.
If you have any questions about this Privacy Policy, your data, or how we handle your information, please reach out to Oriax Technologies.