Privacy Policy

Last updated: October 2026

Your privacy matters to us. This policy explains what personal data Loazi collects, why we collect it, how we store and protect it, and the rights you have over your information. By using Loazi, you agree to the practices described here.

1. Who We Are

Loazi (loazi.org) is a graduate career and skills platform that connects Sri Lankan graduates with companies through verified course scores and AI-assisted matching. When this policy refers to "Loazi", "we", "us", or "our", it means the Loazi platform and its operators.

If you have any questions about this policy, please contact us at connect@loazi.org.

2. Data We Collect

We collect personal data in two ways: information you provide directly, and information collected automatically when you use the platform.

Information you provide:

Account details — your full name, email address, and password when you register with email, or your name, email address, and profile picture when you sign in with Google.
Graduate profile — your university, degree, graduation year, skills, work experience, profile photo, CV document, and career preferences.
Course and assessment data — scores, badges, and completion records from Loazi courses you enrol in.
Company profile — company name, business registration number, registered address, and supporting verification documents (for employer accounts).
Communications — messages, application notes, or feedback submitted through the platform.
Marketing preferences — whether you have opted in to receive news and promotional emails from Loazi.

Information collected automatically:

Usage data — pages visited, features used, search queries, clicks, and time spent on the platform.
Device and technical data — IP address, browser type and version, operating system, and referring URLs, collected for security and performance monitoring.
Session data — authentication tokens stored locally in your browser to keep you signed in.

3. How We Use Your Data

We use the data we collect for the following purposes:

Account management — to create your account, verify your identity, and provide access to the platform.
Graduate-company matching — to display verified course scores and profile information to relevant employers, and to recommend suitable opportunities to graduates.
AI CV scoring — to analyse your CV against job descriptions using our AI tool and provide you with a match score and improvement suggestions.
Verified score display — to show employers your authentic, platform-verified skill scores and course completions as part of your public profile.
Company verification — to review and approve employer accounts to maintain platform integrity.
Service communications — to send you account alerts, application updates, and security notifications that are necessary for the service.
Marketing communications — to send you news, promotions, and platform updates, only if you have explicitly opted in. You can withdraw consent at any time.
Platform improvement — to analyse aggregated, anonymised usage patterns to improve features and user experience.
Legal compliance — to meet any legal obligations that apply to the operation of the platform.

    We do not sell your personal data to third parties. Data shared with employers is limited to what is visible on your public profile or submitted as part of a specific job application.
  

4. Google OAuth Login

Loazi offers sign-in via Google OAuth, powered by Google's identity services. When you choose to sign in with Google:

Google shares your name, email address, and profile picture with Loazi to create or identify your account.
We do not receive your Google password at any point.
We do not access your Google contacts, Gmail, Google Drive, or any other Google services beyond the basic profile information needed to authenticate you.
Your use of Google's sign-in service is also subject to Google's Privacy Policy.

You can revoke Loazi's access to your Google account at any time by visiting your Google account permissions page. Revoking access will not delete your Loazi account or data.

5. How We Store Your Data

Loazi uses Supabase as its backend infrastructure for database storage and user authentication. Supabase is a secure, cloud-hosted platform built on PostgreSQL and hosted on Amazon Web Services (AWS) in the Asia Pacific (Singapore) region.

All data is stored in encrypted databases. Connections to our database are encrypted in transit using TLS.
Authentication tokens and session data are stored securely and expire automatically after a period of inactivity.
Supabase's infrastructure is compliant with industry-standard security practices. You can read more at supabase.com/security.
We retain your personal data for as long as your account is active, or as required to fulfil the purposes described in this policy.

If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

6. Sharing Your Data

We do not sell your data. We may share your information with third parties only in the following limited circumstances:

Employers on Loazi — verified companies can view the information on your public graduate profile, including your name, skills, course scores, and CV, when you make your profile visible or apply for an opportunity.
Service providers — trusted third-party providers (such as Supabase for data storage, Google for sign-in, and — only if you allow it — Google Analytics for site statistics) that help us operate the platform, under strict data processing agreements.
Legal requirements — if required by law, court order, or to protect the rights, safety, or property of Loazi, its users, or the public.
Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, and you will be notified in advance.

7. Your Rights

You have the following rights over your personal data:

Access — you can request a copy of the personal data we hold about you.
Correction — you can update or correct your information at any time through your account settings.
Deletion — you can request that we delete your account and personal data.
Withdrawal of consent — you can withdraw your consent to marketing communications at any time by contacting us or updating your preferences in account settings.
Data portability — you can request your data in a portable, machine-readable format.
Objection — you can object to certain types of processing, such as direct marketing.

To exercise any of these rights, email us at connect@loazi.org with the subject line "Privacy Request". We will respond within 30 days.

8. Cookies and Browser Storage

When you first visit, we ask before setting any cookie that isn't needed for Loazi to work. Nothing optional is stored until you choose, and you can change your choice at any time from Cookie settings (also at the bottom of our main pages).

Always on — needed for the site to work. These stay in your browser and are not shared with anyone:

Your sign-in — kept in your browser's local storage by Supabase, our database provider, so you stay signed in between visits. Signing out removes it.
Your cookie choice — so we don't ask you on every page.
Settings you pick — such as light or dark mode, and the voice and speed of course audio.
Work in progress — for example, the details read from your CV while you finish setting up your profile.

Analytics — only if you allow it.

Google Analytics cookies (_ga and _ga_…, kept for up to 13 months) — tell us, in total, which pages people visit and how they use them, so we can improve Loazi. Google Analytics is provided by Google; see how Google uses this information.
Where you came from — which link or website first brought you to Loazi, kept in your browser and sent with your registration, so we know which of our posts reach graduates. Before you choose, this is kept only until you close the tab.

Marketing — only if you allow it.

Google's advertising cookie (_gcl_au, kept for 90 days) — tells us whether a Google ad led to a visit. We don't show ads on Loazi.

If you don't allow analytics, Google Analytics sets no cookies. It may still receive basic signals that a page was viewed, with no identifier linked to you, which Google uses to estimate overall visitor numbers. Saying no also deletes any analytics cookies and "where you came from" record already in your browser.

When you make a choice, we keep a record of it — what you chose, the page, your browser type and a random ID — so we can show that we asked. We never use cookies to show you advertising, and we never sell your data.

9. Children's Privacy

Loazi is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us at connect@loazi.org and we will promptly remove the account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email or by displaying a notice within the platform. The "last updated" date at the top of this page will always reflect the most recent version.

Continued use of Loazi after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Loazi
Email: connect@loazi.org
Website: loazi.org

This Privacy Policy is governed by the laws of Sri Lanka. By using Loazi, you acknowledge that you have read and understood this policy.