Privacy Policy

1. Information We Collect

We collect personal identification information including your name, email address, phone number, and digital wallet balance. When utilizing our live bus tracking features, the platform collects GPS coordinates from operators and conductor applications to estimate ETAs. For card payments we receive authorization results (for example transaction reference and authorization code) from our payment gateway — we do not collect or store full card numbers or CVV.

2. How We Use Your Data

Your data is processed to:

• Issue secure digital boarding tickets and verify them at the bus.
• Process ticket payment checkouts and refunds.
• Provide live location tracking and send push notifications for route updates or delays.
• Conduct fraud detection checks on concurrent scans.

3. Data Retention and Storage

Operational data is stored in a hosted PostgreSQL database with retention controls. Our database host provides encryption at rest for storage volumes; CeyBus does not apply additional application-level (column) encryption to passenger fields. Cardholder PAN/CVV is never stored on CeyBus systems; payment card data is entered only on the bank-hosted payment page.

4. Security Measures

We protect account credentials with industry-standard password hashing and encrypt data in transit with TLS/HTTPS. Card checkout uses the bank Internet Payment Gateway hosted page with 3D Secure authentication where required by the card schemes. Tickets use Ed25519 cryptographic signatures to secure verification offline and avoid duplicate boarding scans.

5. Third-Party Sharing

We do not sell your personal data to marketing third parties. Data is shared with authorized bus operators, the card payment gateway / acquiring bank (Commercial Bank Bancstac IPG or other configured gateways) for authorization and settlement, travel insurance partners (e.g., Ceylinco Insurance), or government bodies (e.g., NTC) strictly for scheduling, insurance validation, and regulatory compliance. In production we also use privacy-preserving analytics and session tools (Google Analytics 4, Microsoft Clarity, and — when configured — Meta Pixel) to measure site performance and marketing conversions. You may restrict marketing use of your contact details by contacting support@ceybus.lk.

6. Merchant and contact

CeyBus — No. 455/B, Adukatiyawa Road, Parasangaswewa, Anuradhapura, Sri Lanka. Email: support@ceybus.lk.