Privacy Policy

1. Who is responsible for your data

Strontium Innovations is responsible for the personal data we collect about our own customers, account users and website visitors. When a business uses our Services to manage data about its own customers (for example, contacts in Think SMS or WhatsApp conversations in Lumo), that business decides how the data is used and is responsible for it. We process that data on the business’s behalf and only to provide the Services.

2. What we collect

• Account details: your name, email address, phone number, business name and address, and login credentials.
• Billing details: plan, payment history and invoices. Card payments are handled by our payment provider; we do not store full card numbers.
• Content you add to the Services: product catalogues, customer lists, messages, campaigns, receipts, invoices and similar business records.
• Usage and device data: pages and features used, log data, IP address, browser type and approximate location, collected so the Services work reliably and securely.
• Communications: messages you send us by email, phone or through the Services.

3. How we use it

• To create and run your account and provide the Services you have signed up for.
• To process payments, issue invoices and manage subscriptions.
• To send service messages, such as security alerts, billing notices and important changes.
• To provide support and answer your questions.
• To keep the Services secure, prevent fraud and abuse, and fix problems.
• To understand how the Services are used and improve them.
• To meet our legal, tax and accounting obligations.

We do not sell personal data. We do not use the content you add to the Services to train AI models for other customers.

4. AI features

Some features use AI services, for example to answer customer messages in Lumo or to read receipts in EasyVat. The content needed for that feature is sent to the AI provider only to produce the result, under agreements that protect it. AI output can contain mistakes, so you should review it before relying on it.

5. Who we share it with

We share personal data only as needed to run the Services, with:

• hosting, database and infrastructure providers;
• messaging providers that deliver SMS and WhatsApp messages you send through the Services;
• AI providers that power specific features;
• payment processors;
• platforms you choose to connect, such as your online store;
• professional advisers, and authorities where the law requires it.

These providers may process data outside Sri Lanka. Where they do, we take reasonable steps to make sure the data stays protected.

6. Cookies

This website uses only what it needs to work. Our product dashboards use cookies to keep you signed in and secure, and may use basic analytics to understand usage. You can control cookies in your browser settings, but some features may not work without them.

7. How long we keep it

We keep personal data for as long as your account is active and as long afterwards as needed to meet legal, tax and accounting requirements, resolve disputes and enforce our agreements. When it is no longer needed, we delete or anonymise it.

8. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections, access controls and separation of each business’s data. No system is perfectly secure, so please keep your login details safe and tell us straight away if you suspect unauthorised access.

9. Your rights

Subject to applicable law, including Sri Lanka’s Personal Data Protection Act No. 9 of 2022, you can ask to access, correct or delete your personal data, object to or limit certain uses, and withdraw consent where we rely on it. Email info@strontium.cc and we will respond within a reasonable time. If your data is held by a business that uses our Services, please contact that business first; we will help them respond.

10. Children

The Services are for businesses and are not directed at children under 18. We do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new date, and tell account holders about significant changes by email or in the Services.

Contact us

Questions about this policy, or a request about your account or data, can go to: