Skip to content
077 573 7981

Effective Date: 25-07-2026 Last Updated: 25-07-2026

Orez Cloud (Pvt) Ltd, registration number PV00267824 ("Orez Cloud," "We," "Us," "Our"), operates RealCloud, a cloud-based ERP, accounting, and point-of-sale platform, and its companion application RealCloud Connect (together, the "Service"). This Privacy Policy explains what information We collect, how We use it, who We share it with, and the choices You have.

This Policy applies to businesses and individuals who use the Service ("You," "User") and, where relevant, to visitors of our website. By using the Service, You agree to the practices described in this Policy.

1. Scope

This Policy covers:

  • Information collected when You register for and use the Service (Account and Business Data);
  • Technical and usage information collected automatically; and
  • Information collected through Our website.

It does not cover third-party websites or services that may be linked from the Service, which are governed by their own privacy policies.

2. Information We Collect

2.1 Account Information

When You or Your organization sign up, We collect information such as business name, contact person's name, email address, phone number, and billing details.

2.2 Business Data

In the course of using the Service, You and Your Users input business records into RealCloud, including accounting entries, inventory records, invoices, customer and vendor records, and transaction data ("Business Data"). This data belongs to You — see Section 5 for how We handle it.

2.3 Technical and Usage Information

We automatically collect certain technical information when You use the Service, including IP address, device and browser information, log data, and usage patterns (e.g., which features are used), for the purpose of operating, securing, and improving the Service.

2.4 Communications Information

If You contact Us for support or send Us communications, We collect the content of those communications and Your contact details in order to respond.

2.5 Information Sent Through the Service

Where You use the Service to send communications to Your own customers (e.g., invoices, payment reminders) via SMS or WhatsApp, We process the relevant phone numbers and message content solely to deliver those communications on Your behalf.

3. How We Use Information

We use the information We collect to:

  • provide, operate, and maintain the Service;
  • process billing and manage Your Subscription;
  • send Service-related notifications (billing reminders, account alerts, administrative messages);
  • deliver communications You initiate to Your own customers via SMS/WhatsApp;
  • provide customer support and respond to inquiries;
  • monitor, secure, and improve the performance and reliability of the Service;
  • detect, prevent, and address fraud, abuse, or technical issues; and
  • comply with applicable legal obligations.

We do not use Your Business Data for Our own marketing purposes, and We do not sell Your Business Data to third parties.

4. How We Share Information

We do not sell Your personal information or Business Data. We share information only in the following circumstances:

  • Service Providers: We engage trusted third-party providers to help deliver parts of the Service, including SMS gateway providers and the WhatsApp Business messaging platform, for the purpose of transmitting notifications and documents on Your instruction. These providers are only given the information necessary to perform their function.
  • Cloud Infrastructure: The Service is hosted on secure third-party cloud infrastructure. Hosting providers process data solely to store and run the Service and do not use it for their own purposes.
  • Legal Requirements: We may disclose information where required by law, regulation, legal process, or governmental request.
  • Business Transfers: If Orez Cloud is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to the same protections described here.
  • With Your Consent: We may share information for other purposes with Your explicit consent.

5. Ownership and Use of Your Business Data

You retain full ownership of Your Business Data. We access Your Business Data only as necessary to provide, secure, support, and maintain the Service to You, or where You explicitly request assistance (e.g., support troubleshooting). We do not use Your Business Data for internal analytics, benchmarking, or product decisions in a way that is shared outside Your organization, and We do not use it to train external products or share it with unrelated third parties.

6. Data Storage and Security

Your data is stored on secure cloud infrastructure with industry-standard security measures, including encryption in transit, access controls, and regular backups. While We take reasonable steps to protect Your information, no method of transmission or storage is completely secure, and We cannot guarantee absolute security.

7. Data Retention

  • Active Subscriptions: We retain Your Business Data for as long as Your Subscription remains active.
  • Deactivated Accounts: If Your Account is deactivated due to non-payment (see Terms of Service, Section 7) or voluntary closure, We retain Your Data for up to four (4) years following deactivation, during which You may request export or reactivation of Your Account. After this period, Your Data may be permanently deleted.
  • Legal Retention: We may retain certain information for longer where required to comply with legal, accounting, or regulatory obligations.

8. Your Rights and Choices

Depending on applicable law, You may have rights to access, correct, export, or request deletion of personal information We hold about You. You may exercise these rights, or ask questions about Your data, by contacting Us at [email protected].

You may not opt out of essential Service communications (e.g., billing notices, security alerts) while Your Account is active, as these are necessary for the operation of the Service.

9. Cookies and Website Tracking

Our website may use cookies or similar technologies to improve user experience and understand site usage. You can control cookie preferences through Your browser settings; disabling cookies may affect certain website functionality.

10. Children's Privacy

The Service is intended for business use and is not directed at children. We do not knowingly collect personal information from individuals under the age of 18.

11. International Data Transfers

At present, We primarily serve customers in Sri Lanka. As We expand to other countries, this Policy will be updated to describe any relevant international data transfer practices and safeguards. If You have questions about where Your data is processed, contact Us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify You of material changes via email or an in-Service notice. The "Last Updated" date at the top of this Policy indicates when it was last revised.

13. Contact Us

If You have questions, concerns, or requests regarding this Privacy Policy or Your data, please contact:

Orez Cloud (Pvt) Ltd Email: [email protected]