Privacy Policy

Last updated: May 2026

1. Who We Are

Dinaya is operated by Ardeno Studio, based in Sri Lanka. This policy explains what personal data we collect, how we use it, who we share it with, and your rights.

2. Data We Collect

When you use Dinaya we may collect:

Business owners: name, email address, business name, phone number, billing details, staff account details, and business settings.
Clients making bookings: name, phone number, email address, and booking details.
AI feature inputs: business names, service descriptions, and other text you submit when using AI copy or workflow tools.
Usage data: pages visited, browser type, IP address, and anonymous analytics for security and product improvement.

3. How We Use Your Data

To create and manage your account and staff access
To process and confirm bookings
To send booking confirmation and reminder emails
To send SMS and WhatsApp reminders on Pro, Growth, and Managed Max plans, when enabled
To process booking payments and Dinaya subscription billing via PayHere
To generate AI-assisted copy and workflow suggestions when you use those features
To sync availability with connected services such as Google Calendar
To protect the platform through rate limiting and security monitoring
To improve and maintain the platform

4. Sharing Your Data

We do not sell your personal data. We share data only with service providers who help us run Dinaya:

PayHere — to process booking payments and subscription billing securely
Resend — to send transactional emails
Groq — to process AI feature inputs when you use AI copy or workflow tools
Neon / Vercel — our database and hosting providers
Upstash — rate limiting and abuse prevention
Vercel Analytics — anonymous usage metrics (no ad tracking)
Google Analytics (GA4) — optional platform analytics for deal discovery and booking funnels when enabled

AI inputs are sent to Groq only when you actively use AI features. We do not use your booking client data for AI training.

5. Data Retention

We retain your data for as long as your account is active. If you close your account, booking records are retained for 12 months for legal and financial compliance, then deleted. Subscription billing records may be kept longer where required for accounting or tax purposes.

6. Cookies & Analytics

We use session cookies required for authentication. We also use Vercel Analytics to collect anonymous usage metrics that help us understand how the platform is used. When configured, Google Analytics (GA4) may also collect anonymous interaction events on public pages such as deal discovery. We do not use advertising or third-party tracking cookies beyond these analytics tools.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data, subject to legal and financial retention requirements

To exercise any of these rights, email us at hello@dinaya.lk.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS) and hashed passwords. We never store payment card details — card data is handled by PayHere.

9. Contact

Questions about this policy? Contact us at email us at hello@dinaya.lk.