Privacy Policy

1. Overview & Commitment

This Privacy Policy explains how SiraLove (https://siralove.online/) collects, protects, and handles personal data when you create, view, or manage romantic websites on our platform. We operate with a strict privacy-first mindset.

2. Information We Collect

• Account Information: Your full name, email address, and encrypted password hash (protected via bcrypt with cost 12).
• Romantic Keepsake Details: Your partner's name, relationship milestones, anniversary dates, customized text, love letters, and selected background music.
• Uploaded Photographs: Polaroid memories and photo gallery uploads used to construct your celebration webpage.
• Interactive Partner Responses: Secret answers recorded by your recipient (Proposal response, Ocean Bottle message, Promise Wheel selections, and interactive touch signatures).

3. Payment Security & Financial Data (PCI-DSS)

When you complete a checkout on SiraLove via PayHere, your transaction is processed directly through PayHere's 256-bit SSL encrypted, Central Bank of Sri Lanka-approved, PCI-DSS compliant infrastructure. When paying via manual bank transfer, payment slips are inspected strictly for activation verification and kept strictly confidential.

4. 100% Confidential Photo & Media Guarantee

Your romantic pictures belong exclusively to you and your partner:

• Never Sold or Rented: We never sell, rent, monetize, or license your private photos or love letters to any advertising networks, data brokers, or third parties.
• No Public Discovery: We do not publish your romantic photos in public image directories, nor do we submit personal surprise websites to search engine crawlers (Google, Bing) for indexation.
• Private Access: Your customized romantic surprise website is accessible only via the specific custom URL assigned to your project.

5. How Partner Responses Are Guarded

When your partner interacts with your surprise site (submitting wishes into the Ocean Bottle, spinning the Promise Wheel, or accepting your proposal), their responses are securely encrypted in transmission and stored in a locked database table accessible only from your authenticated private User Dashboard.

6. Data Storage & Security Measures

In accordance with our strict Enterprise Security Blueprint, we implement multi-layer defenses to keep your data safe:

• HTTPS / TLS Encryption: All communications between your browser and our servers are encrypted via HTTPS with HSTS enabled.
• MIME-Type & Magic Byte Validation: All uploaded files undergo strict binary inspection, preventing executable code injection.
• Directory Execution Lockdown: Upload directories are protected against script execution.

7. Your Rights: Data Retention & Permanent Deletion

You have full ownership and control over your personal data. At any time, you have the right to:

• Request a copy of your project data.
• Edit or replace your uploaded photos and text from your project dashboard.
• Request Complete Deletion: You can contact our support team at any time to permanently wipe your surprise website, uploaded media, and account from our servers. Once requested, your data will be completely expunged within 24 hours.

8. Contact Us Regarding Privacy