We respect your privacy. This page explains what information we collect when you use MotorHub, why we collect it, how we protect it, and how you can ask us to change or delete it. We follow the principles set out in Sri Lanka's Personal Data Protection Act, No. 9 of 2022.
1. Who we are
MotorHub is operated by eWorksOnline (Pvt) Ltd (referred to as "we", "us" and "our"). For any privacy question, use the Contact form and pick the Privacy / data request category.
2. What we collect
- Account details — mobile number (mandatory), email address (optional), name, account type (Individual / Dealer / Agency / Business), district and city.
- Authentication data — bcrypt-hashed password and the short-lived one-time codes (SMS / email) used to verify mobile and email changes.
- Ads you post — title, description, price, vehicle attributes, photos and (optionally) location.
- Messages and leads — chats with other users and contact requests sent to sellers.
- Payments — plan upgrades and featured-ad purchases processed by our payment partners. We never see your card number.
- Device data — basic logs (IP address, browser, timestamp) used to detect abuse.
3. Why we collect it
- To create and protect your account.
- To verify that you are reachable on the mobile number you claim.
- To display your ads and let other users contact you.
- To send transactional messages — receipts, password resets, account notices.
- To investigate fraud, abuse and breaches of our Terms of Service.
4. Who we share it with
We do not sell your information. We share it only with the third parties needed to operate the platform:
- SMS delivery — Hutch (primary), Dialog, Mobitel and Twilio (fallback). They receive your mobile number and the OTP message.
- Email delivery — Resend. They receive your email and the transactional message we send you.
- Payments — PayHere and PayPal. They handle card data and send us back a transaction status; we never store card numbers.
- Image hosting — Cloudflare R2. Photos you upload are stripped of EXIF metadata (including GPS coordinates) before storage.
5. How long we keep it
- Account data — for as long as your account exists. When you delete the account, personal details are removed within 30 days.
- Expired ads — kept in your dashboard for 30 days so you can reactivate them, then deleted.
- Payment records — retained for 7 years to meet tax and accounting obligations.
- Abuse logs — retained as long as needed to investigate and prevent recurrence.
6. Your rights
You can ask us to:
- Show you the personal data we hold on you.
- Correct anything that is wrong.
- Delete your account (subject to the legal retention noted above).
- Export your ad and message history in a machine-readable format.
Submit the request via the Contact form (pick Privacy / data request) and include your registered mobile number — we will respond within 14 days.
7. Cookies
We use first-party cookies (motorhub_session, motorhub_admin) only to keep you signed in. We use Google Analytics 4 for aggregate, anonymised usage statistics. We do not use third-party advertising trackers.
8. Children
MotorHub is not intended for users under 18. We do not knowingly process the personal data of minors.
9. Changes to this policy
We will update this page if our practices change. Material changes will be notified via a bell-icon notification in your account.