Privacy Policy
Last updated: 24 June 2026
This Privacy Policy explains how Cybergate Services Private Ltd ("BizHub", "we", "us" or "our") collects, uses, shares and protects information in connection with the BizHub platform, websites and related services (the "Service") available at bizhub.cyberone.lk. It also describes the choices you have regarding your information, including how to request deletion.
BizHub uses the Meta (Facebook & Instagram) Platform and the WhatsApp Business Platform to help businesses receive leads and messages. This policy describes how data obtained through those platforms is handled, in line with the Meta Platform Terms and Developer Policies.
Contents
- Who we are
- Information we collect
- Data we access through Meta & WhatsApp
- How we use information
- How we share information
- Data retention
- How to delete your data
- Security
- Cookies
- Your rights
- International transfers
- Children
- Changes to this policy
- Contact us
1. Who we are
BizHub is a business management and automation platform operated by Cybergate Services Private Ltd, Sri Lanka. For the business data that our customers (the "Business") store and process in BizHub, the Business is the data controller and BizHub acts as the data processor. For our own websites, accounts and billing, BizHub is the controller.
2. Information we collect
Account & contact information
Name, business name, email address, phone number, and login credentials when you sign up or are invited to a workspace.
Business data you enter
Information you and your team add to BizHub — such as customers, contacts, leads, invoices, products, stock, suppliers and documents.
Usage & device data
Log data such as IP address, browser type, pages viewed and actions taken, used to operate and secure the Service.
3. Data we access through Meta & WhatsApp
When a Business connects its Facebook Page or WhatsApp Business account to BizHub, and only with that Business's authorisation, we may access:
- Facebook Pages & Lead Ads: Page profile information, the list of lead generation forms, and the lead data submitted by people through those forms (for example name, email and phone number). This is used to deliver each lead into the connected Business's CRM.
- Page access tokens: stored securely (encrypted) so we can retrieve leads and, where authorised, send and receive messages on the Page's behalf.
- Messaging: messages and conversations on Facebook Messenger and WhatsApp between the Business and its customers, so the Business can reply, automate responses and keep a record.
- Insights (optional): aggregated campaign and ad performance metrics, where the Business enables this.
We use Meta and WhatsApp data only to provide features the Business has switched on. We do not sell this data, use it for advertising, or share it except as described in this policy.
4. How we use information
- To provide, operate and maintain the Service;
- To deliver leads, messages and notifications to the connected Business;
- To enable automation, chatbots and AI-assisted replies that the Business configures;
- To authenticate users and secure accounts;
- To provide customer support;
- To comply with legal and tax obligations.
5. How we share information
We share information only:
- With the Business whose workspace the data belongs to, and its authorised users;
- With service providers (sub-processors) who host and operate the Service on our behalf (for example cloud hosting and messaging gateways), under confidentiality obligations;
- When required by law or to protect our rights and users' safety.
We never sell personal data.
6. Data retention
We retain personal data for as long as a Business maintains its account or as needed to provide the Service, and thereafter only as required by law (for example tax records). A Business can delete records within BizHub at any time, and may request full deletion as described below.
7. How to delete your data
Disconnect: A Business can disconnect its Facebook Page or WhatsApp account from BizHub at any time in the app (Integrations). Disconnecting revokes our access tokens and stops further data collection from Meta/WhatsApp.
Request deletion: To request deletion of your personal data or data obtained via Meta, email bizhub@cyberone.lk with the subject "Data deletion request". We will verify and action the request within 30 days.
Full step-by-step instructions are on our Data Deletion Instructions page.
8. Security
We use industry-standard measures including encryption in transit (HTTPS), encryption of access tokens at rest, access controls and per-tenant data isolation. No method of transmission or storage is 100% secure, but we work to protect your information.
9. Cookies
We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising cookies on our application.
10. Your rights
Depending on your location, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.
11. International transfers
Your data is primarily hosted in our cloud infrastructure. Where data is processed outside your country, we take steps to ensure an adequate level of protection.
12. Children
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect data from children.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date.
14. Contact us
Cybergate Services Private Ltd — BizHub
Email: bizhub@cyberone.lk
Website: bizhub.cyberone.lk