Legal

Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains how LOOMOD (PVT) LTD (“we”, “us”, “our”) collects, uses, and protects personal data when you visit banksheet.lk or use Banksheet, our bank-statement conversion service.

1. Who we are

Banksheet is a product of LOOMOD (PVT) LTD, a private limited company registered in Sri Lanka.

• Registration number: PV 00264345
• Contact: keshan@banksheet.lk

For the purposes of the Personal Data Protection Act No. 9 of 2022 of Sri Lanka, we are the controller of personal data described in this policy, unless we process data solely on a customer’s instructions (in which case we act as a processor).

2. The data we collect

Account and enquiry data

When you request a demo, ask for support, or otherwise contact us, we collect the information you send us. That typically includes your name, email address, organisation, and the content of your message.

Bank statement data

If you use Banksheet, you may upload scanned PDFs of bank statements. Those files can contain names, account numbers, transaction descriptions, amounts, balances, and other financial details. We process this data only to provide the service you requested: extraction, categorisation, and export.

Technical data

Our website and service may automatically collect limited technical information such as IP address, browser type, device type, pages visited, and approximate timestamps. We use this to operate, secure, and improve the service.

Analytics and cookies

We use Google Analytics to understand how visitors use banksheet.lk, for example which pages are viewed, which buttons are clicked, and whether the product video is watched. Google Analytics sets cookies and processes your IP address and device information on our behalf. You can block these cookies in your browser settings or with the Google Analytics opt-out add-on.

Payment data

When you buy a subscription, your payment is processed by our third-party payment gateway. We receive the payment status, amount, date, and a transaction reference. We do not receive or store your full card number or security code.

3. How we use personal data

We use personal data to:

• respond to demo requests and support enquiries;
• provide, maintain, and improve Banksheet;
• extract transactions from uploaded statements and return structured files to you;
• communicate about the service, including security or account notices;
• comply with law, enforce our terms, and protect our rights and users.

We do not sell your personal data or your bank-statement contents. We do not use uploaded statements to train public models or for advertising.

4. Legal bases for processing

Depending on the activity, we rely on:

• Contract — to provide Banksheet and related support when you ask us to process statements or take a demo through to a paid arrangement;
• Legitimate interests — to operate and secure our website, respond to enquiries, and improve the product, where those interests are not overridden by your rights;
• Consent — where we ask for it, for example optional marketing emails (you can withdraw consent at any time);
• Legal obligation — where we must keep or disclose information to comply with the laws of Sri Lanka, for example tax and accounting records.

5. How long we keep data

Enquiry emails and related correspondence are kept for as long as needed to handle your request and for a reasonable period afterwards (typically up to 24 months), unless a longer period is required for legal or accounting reasons.

Uploaded bank statements and extracted output are retained only for as long as needed to complete processing and let you download results, then deleted or irreversibly anonymised, unless you ask us to keep a workspace copy under a paid arrangement or we must retain data to meet a legal obligation.

6. Sharing and processors

We share personal data only with:

• service providers who host infrastructure, email, analytics, or security tooling, under contract and only as needed to run Banksheet;
• our payment gateway and the banks involved, to process and verify payments;
• professional advisers (for example accountants or lawyers) where required;
• authorities if the law requires us to do so.

This website loads fonts from Google Fonts and styling from a third-party CSS CDN. Those providers may process your IP address and technical data according to their own policies.

7. International transfers

We are established in Sri Lanka. Some of our service providers, such as hosting and analytics providers, store or process data outside Sri Lanka. Where personal data is transferred outside Sri Lanka, we do so in line with the Personal Data Protection Act and use providers that apply appropriate safeguards to protect it.

8. Your rights

Under the Personal Data Protection Act you may have the right to access, correct, erase, or restrict processing of your personal data, to object to processing, and to data portability. You may also withdraw consent where processing is based on consent. To exercise these rights, email keshan@banksheet.lk.

You can also complain to the Data Protection Authority of Sri Lanka. We would appreciate the chance to resolve your concern first.

9. Children

Banksheet is intended for businesses and finance professionals. We do not knowingly collect personal data from children.

10. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after an update means you should review the revised policy.

11. Contact

Questions about this policy or our use of personal data: keshan@banksheet.lk.