Privacy Policy

Effective date: September 11, 2025

1. Introduction

This policy explains how [Roky Account / Roky Holding] ("we", "us", "our") collects, uses, and protects information when you use our app or website.

2. Information we collect

Personal data: name, email, phone number, role (e.g. CEO, Director), and any data you submit in requests.
Usage data: logs, device type, IP address, timestamps, and basic analytics.
Files: uploaded receipts and images (stored securely for audit and reporting).

3. How we use information

To provide and operate the service (IOU requests, approvals, dashboards).
To send notifications (email/SMS) about request status and approvals.
To generate reports and audit logs for compliance.
To improve the system and fix bugs.

4. Cookies & local storage

We use cookies or local storage for session management (token-based login) and basic preferences. You can clear cookies from your browser at any time.

5. Data sharing & third parties

We do not sell personal data. We may share limited information with trusted third-party providers (e.g. SMS gateway, email provider) to deliver notifications. These providers are required to keep data secure.

6. Security

We apply standard security measures including HTTPS and token-based authentication. While we work to protect your data, no system is 100% secure — please contact us if you suspect any issue.

7. Data retention

We retain data as needed to provide the service and to comply with legal obligations. If you need data removed, contact us using the details below.

8. Your rights

You may request access, correction, or deletion of your personal data. For such requests, please contact our support team.

Note: For enterprise deployments (ROKY Holdings), some records (e.g., approved vouchers) may be retained for auditing and compliance as required by local law.

9. Contact

If you have questions or requests about this policy, contact:
Email: [info@rokyholdings.com]
Address: [No 10, Raja Mawatha, Pita Kotte 10100]