Privacy Policy

Last updated: April 2026

Your privacy matters to us. This policy explains what personal data Loazi collects, why we collect it, how we store and protect it, and the rights you have over your information. By using Loazi, you agree to the practices described here.

1. Who We Are

Loazi (loazi.org) is a graduate career and skills platform that connects Sri Lankan graduates with companies through verified course scores and AI-assisted matching. When this policy refers to "Loazi", "we", "us", or "our", it means the Loazi platform and its operators.

If you have any questions about this policy, please contact us at hello@loazi.lk.

2. Data We Collect

We collect personal data in two ways: information you provide directly, and information collected automatically when you use the platform.

Information you provide:

Account details — your full name, email address, and password when you register with email, or your name, email address, and profile picture when you sign in with Google.
Graduate profile — your university, degree, graduation year, skills, work experience, profile photo, CV document, and career preferences.
Course and assessment data — scores, badges, and completion records from Loazi courses you enrol in.
Company profile — company name, business registration number, registered address, and supporting verification documents (for employer accounts).
Communications — messages, application notes, or feedback submitted through the platform.
Marketing preferences — whether you have opted in to receive news and promotional emails from Loazi.

Information collected automatically:

Usage data — pages visited, features used, search queries, clicks, and time spent on the platform.
Device and technical data — IP address, browser type and version, operating system, and referring URLs, collected for security and performance monitoring.
Session data — authentication tokens stored locally in your browser to keep you signed in.

3. How We Use Your Data

We use the data we collect for the following purposes:

Account management — to create your account, verify your identity, and provide access to the platform.
Graduate-company matching — to display verified course scores and profile information to relevant employers, and to recommend suitable opportunities to graduates.
AI CV scoring — to analyse your CV against job descriptions using our AI tool and provide you with a match score and improvement suggestions.
Verified score display — to show employers your authentic, platform-verified skill scores and course completions as part of your public profile.
Company verification — to review and approve employer accounts to maintain platform integrity.
Service communications — to send you account alerts, application updates, and security notifications that are necessary for the service.
Marketing communications — to send you news, promotions, and platform updates, only if you have explicitly opted in. You can withdraw consent at any time.
Platform improvement — to analyse aggregated, anonymised usage patterns to improve features and user experience.
Legal compliance — to meet any legal obligations that apply to the operation of the platform.

    We do not sell your personal data to third parties. Data shared with employers is limited to what is visible on your public profile or submitted as part of a specific job application.
  

4. Google OAuth Login

Loazi offers sign-in via Google OAuth, powered by Google's identity services. When you choose to sign in with Google:

Google shares your name, email address, and profile picture with Loazi to create or identify your account.
We do not receive your Google password at any point.
We do not access your Google contacts, Gmail, Google Drive, or any other Google services beyond the basic profile information needed to authenticate you.
Your use of Google's sign-in service is also subject to Google's Privacy Policy.

You can revoke Loazi's access to your Google account at any time by visiting your Google account permissions page. Revoking access will not delete your Loazi account or data.

5. How We Store Your Data

Loazi uses Supabase as its backend infrastructure for database storage and user authentication. Supabase is a secure, cloud-hosted platform built on PostgreSQL and hosted on Amazon Web Services (AWS) in the Asia Pacific (Singapore) region.

All data is stored in encrypted databases. Connections to our database are encrypted in transit using TLS.
Authentication tokens and session data are stored securely and expire automatically after a period of inactivity.
Supabase's infrastructure is compliant with industry-standard security practices. You can read more at supabase.com/security.
We retain your personal data for as long as your account is active, or as required to fulfil the purposes described in this policy.

If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

6. Sharing Your Data

We do not sell your data. We may share your information with third parties only in the following limited circumstances:

Employers on Loazi — verified companies can view the information on your public graduate profile, including your name, skills, course scores, and CV, when you make your profile visible or apply for an opportunity.
Service providers — trusted third-party providers (such as Supabase for data storage and Google for authentication) that help us operate the platform, under strict data processing agreements.
Legal requirements — if required by law, court order, or to protect the rights, safety, or property of Loazi, its users, or the public.
Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, and you will be notified in advance.

7. Your Rights

You have the following rights over your personal data:

Access — you can request a copy of the personal data we hold about you.
Correction — you can update or correct your information at any time through your account settings.
Deletion — you can request that we delete your account and personal data.
Withdrawal of consent — you can withdraw your consent to marketing communications at any time by contacting us or updating your preferences in account settings.
Data portability — you can request your data in a portable, machine-readable format.
Objection — you can object to certain types of processing, such as direct marketing.

To exercise any of these rights, email us at hello@loazi.lk with the subject line "Privacy Request". We will respond within 30 days.

8. Cookies and Local Storage

Loazi uses browser local storage (not traditional cookies) to store your authentication session so you remain signed in between visits. No third-party advertising or tracking cookies are used on Loazi.

You can clear your browser's local storage at any time through your browser settings, which will sign you out of Loazi.

9. Children's Privacy

Loazi is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us at hello@loazi.lk and we will promptly remove the account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email or by displaying a notice within the platform. The "last updated" date at the top of this page will always reflect the most recent version.

Continued use of Loazi after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Loazi
Email: hello@loazi.lk
Website: loazi.org

This Privacy Policy is governed by the laws of Sri Lanka. By using Loazi, you acknowledge that you have read and understood this policy.