Netly Pay Privacy Policy
Effective date: 16 October 2026
Last updated: 16 October 2026
This Privacy Policy explains how Zegates International Private Limited ("Zegates", "we", "us") collects, uses, shares and protects personal data when you use the Netly Pay mobile app, the Netly Pay website at netly.netlise.com, and related services (together, "Netly Pay").
Netly Pay is part of the Netlise platform. This policy applies to Netly Pay only. The general Netlise privacy policy covers other Netlise products.
1. Who we are
Controller and service provider: Zegates International Private Limited
Registered address: 5/7 Railway Avenue, Nugegoda, Sri Lanka
Contact, including privacy and data protection: support@netlise.com
2. How Netly Pay works, and our role
Netly Pay connects businesses with the people they serve.
- Businesses are academies, clubs, tuition classes, tutors, gyms, property owners, clinics and similar organisations. Their owners and staff use Business mode to manage members, payment requests, attendance and records.
- Customers are members, students, parents and guardians, tenants and patients. They use Personal mode to see what is due, pay, and view their schedules, attendance and membership cards.
Our role depends on the data:
| Data | Our role |
|---|---|
| Your Netly Pay account (name, email, sign-in details, settings) | We are the controller |
| Records a business keeps about its members, students, tenants or patients (for example names, contact details, attendance and payment history) | The business is the controller. We process this data on the business's behalf and only to provide Netly Pay to it |
If you are a customer of a business on Netly Pay and have questions about the records that business keeps about you, please contact the business first. We will help the business respond, and you can also contact us.
3. Personal data we collect
3.1 Data you give us
- Account details: name, email address, preferred region, and the identifier from Google or Apple if you sign in with them.
- Business details (business owners): business name, type, logo, address, contact details, staff members, and the bank or QR details the business chooses to show its customers for payments.
- Profile and family details: your phone number, and details of children or other dependents you manage in the app.
- Payment information: payment requests, amounts, payment method, the date you paid, bank reference numbers, notes, and images of payment slips or other proof of payment you upload. This includes payments you report as already made, which the business then approves or rejects.
- Messages and requests: join requests, maintenance requests, notes and other information you submit through the app.
3.2 Data businesses enter about their customers
A business using Netly Pay may enter or import information about its members, students, tenants or patients, such as:
- name, phone number, email, date of birth, gender, address and photo
- parent or guardian details and emergency contacts
- consents the person or their guardian gave the business (for example to its terms, to photos, or to marketing), with who gave them and when
- a short medical note (for example an allergy or condition staff should know about), only where the business has turned this on and the person or their guardian has consented. Only staff the business allows can see it
- programs, classes, batches, memberships, packages and lesson notes
- attendance, check-in and session records
- payment requests, payments, receipts and balances
- for property businesses: unit, lease, meter readings, service charges and maintenance requests, including photos
- for clinics: appointments, queue tokens and bills. Netly Pay is not designed to store diagnoses, clinical notes or prescriptions, and asks clinics to use generic service names
- other fields the business chooses to record, where the business has enabled them
Businesses are responsible for having a lawful basis, and where needed the consent of the person or their guardian, for the data they enter.
3.3 Data collected automatically
- Device information: device type, operating system, app version, and a push notification token so we can send you notifications.
- Usage and log data: date and time of requests, IP address, the actions performed, and error details recorded by our servers. We use this to run, secure and improve the service.
- Camera: the app uses the camera only to scan QR codes for attendance, check-in and joining a business, and to take a photo when you choose to upload a payment slip, meter or maintenance photo. We do not record video or keep camera images other than photos you choose to upload.
- Photos: the app accesses your photo library only when you choose an image to upload, or when you choose to save a receipt or payment QR code to your Photos.
We do not collect your precise location, your contacts, microphone recordings, health data from your device, or advertising identifiers.
3.4 Card payments
When card payments are available, card details are entered on a secure checkout page provided by our payment partner and are sent directly to that partner. Netly Pay never receives or stores your full card number or security code. We receive only the payment result, the amount, and limited card details such as the card brand and last four digits.
4. How we use personal data
| Purpose | Legal basis |
|---|---|
| Create and manage your account and sign you in | Performance of our agreement with you |
| Provide Netly Pay to businesses and their customers: payment requests, payments, receipts, attendance, memberships, records and reports | Performance of our agreement; for business records, the business's instructions |
| Send notifications and emails about payment requests, reminders, approvals, attendance and account activity | Performance of our agreement |
| Verify payments and prevent fraud, misuse and security incidents | Our legitimate interests and legal obligations |
| Provide support and respond to your requests | Performance of our agreement and legitimate interests |
| Measure usage (for example the number of active members per business) to operate and plan the service | Our legitimate interests |
| Comply with law, accounting and tax requirements, and requests from authorities | Legal obligation |
We do not sell personal data, use it for advertising, or use it to track you across other companies' apps or websites.
5. Who we share personal data with
5.1 Within Netly Pay
- Businesses and their customers: when you are a customer of a business, that business can see the records it keeps about you and the payments and requests you make to it. When you are a business, your customers can see your business name, logo, contact details, the payment details you publish, and the requests you send them.
- Staff of a business see the data their role allows.
5.2 Service providers
We use trusted providers who process data for us under contract and only for the purposes above:
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, database, file storage, sign-in (Amazon Cognito) and email delivery (Amazon SES) | Singapore (primary) |
| Google and Apple | Sign in with Google and Sign in with Apple, if you choose them | Global |
| Expo, Apple Push Notification service and Firebase Cloud Messaging | Delivering push notifications and app updates | Global |
| Netlise IPG and its acquiring bank | Processing card payments, when available | Sri Lanka |
5.3 Other disclosures
We may disclose personal data if required by law, court order or a lawful request from a public authority, to protect the rights, safety and property of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply.
6. International transfers
Netly Pay data is stored in Amazon Web Services data centres in Singapore. Some service providers listed above may process data in other countries. Where data is transferred outside Sri Lanka, we take steps to make sure it receives a level of protection consistent with this policy and the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka.
7. How long we keep personal data
| Data | Retention |
|---|---|
| Your account | Until you delete your account |
| Business records (members, payments, attendance, receipts) | For as long as the business keeps its Netly Pay workspace, and afterwards as long as required for legal, tax and accounting purposes |
| Temporary uploads that were not attached to a record | Deleted within 2 days |
| Generated statements | Deleted within 7 days |
| Backups | Overwritten on a rolling basis within 35 days |
| Logs | Up to 30 days, unless needed to investigate a security incident |
8. Deleting your account
You can delete your account at any time in the app under Profile → Sign-in & security → Delete account, or by writing to support@netlise.com.
When you delete your account:
- your profile, sign-in, notifications, devices and app settings are deleted;
- you are unlinked from the businesses you belong to;
- if you own businesses, the app asks you to confirm, and those businesses are deleted with your account, including their records and files;
- records another business keeps about you (for example payments you made and receipts it issued) stay with that business, because the business needs them for its accounts. You can ask the business to delete them, subject to its legal obligations.
9. Your rights
Subject to applicable law, including the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, you have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion of your data;
- withdraw consent, where we rely on consent;
- object to or restrict certain processing;
- request a copy of your data in a portable format;
- complain to the Data Protection Authority of Sri Lanka or your local authority.
You can update most of your details in the app. For other requests, write to support@netlise.com. We may need to confirm your identity. We will respond within 21 working days. For records a business keeps about you, we will pass your request to that business or help it respond.
10. Children
Netly Pay is not directed at children, and only adults may create an account. Businesses such as academies and tuition classes may keep records about children, and parents or guardians may manage their children's memberships and payments from their own account. These records are entered and managed by the business or the parent or guardian, who is responsible for the child's information. If you believe a child has created an account, contact us and we will delete it.
11. Security
We protect personal data with measures including encryption in transit (TLS), encryption at rest, separation of each business's data, role-based access for business staff, private file storage with short-lived access links, and restricted access for our own staff. No system is completely secure. If we become aware of a personal data breach that affects you, we will notify you and the relevant authority as required by law.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for significant changes, notify you in the app or by email before the change takes effect.
13. Contact us
Zegates International Private Limited
5/7 Railway Avenue, Nugegoda, Sri Lanka
Email: support@netlise.com