AdvoFits is run by Fundora IT Solutions. This policy explains, in simple terms, what information we keep, why we keep it and how we look after it.
Last updated: 3 November 2026
Who is responsible for your information
- We are responsible for the details we keep about law firms and their users, such as accounts and billing.
- Each law firm is responsible for the information it adds about its own clients and cases. We handle that information for the firm, only to provide AdvoFits to it.
- If you are a client of a law firm that uses AdvoFits, please contact the firm first about your information. We will help the firm respond.
What we collect
- Your account details, such as your name, email address, phone number and your firm's name and web address.
- Plan and payment records: your orders and invoices, and any bank payment receipts you upload.
- The information firms add to AdvoFits: cases, hearings, clients, documents, tasks, time entries, invoices and notarial deeds. This can include identity numbers, dates of birth and sensitive details that are part of a legal matter.
- Support tickets and the questions you ask Ask AdvoFits.
- Sign-in and security details: your browser and device, IP address, approximate location worked out from the IP address, and login times.
- A record of who created, changed or deleted a record, with the values before and after.
- Notification details for each phone or computer where you switch on push notifications.
- Cookies that keep you signed in and remember your settings. We do not use cookies for advertising. If the security check on our sign-in forms is switched on, its provider may set its own cookies.
Why we use it
- To provide AdvoFits under our agreement with you, including support and messages about your account, plan and payments.
- To keep AdvoFits secure, prevent misuse and improve the service. We do not use the information firms add about their clients to improve AdvoFits.
- To meet our legal duties, such as keeping accounting records.
- With your choice or consent where it is needed, such as for push notifications.
- We do not sell your information to anyone.
Who we share it with
We use service providers to run AdvoFits and share only what each one needs. Some of them may store or process information outside Sri Lanka.
- Hosting and backups: the servers that store AdvoFits and its data.
- AI features: when you use Ask AdvoFits, your question and the records it looks up to answer you, which can include client names and case details, are sent to our AI provider.
- Security: a security check on sign-in forms when it is switched on, and a location service that receives the IP address used to sign in.
- Notifications: your browser or phone's push service delivers push notifications.
- SMS and email: a firm's messages go through the firm's own SMS provider account and email settings. The phone number or email address and the message go to that provider.
We may also share information when the law or a court requires it.
How we protect it
- Each firm's records are kept in its own database, separate from other firms.
- Firms decide which team members and clients can see or change what, using roles and permissions.
- Passwords are stored in a scrambled (hashed) form, so no one can read them. Two-factor sign-in is available.
- Connections to AdvoFits are encrypted (HTTPS).
- If a data breach affects your information, we will tell you promptly and report it as the law requires.
How long we keep it
- We keep your information while your account is open, including your login history.
- If your plan ends, your data is kept and your firm's owner can still download it. It is not deleted because a plan has ended.
- When you close your account, you can ask us for a copy of your data. We then delete it, unless the law requires us to keep part of it, such as accounting records.
- Records of changes are deleted after two years.
- Deleted information can stay in our backups for a short time until those backups are replaced.
Your rights
We handle personal data in line with Sri Lanka's Personal Data Protection Act. You can ask us to show you, correct or delete your personal information, object to how we use it, or withdraw a consent you gave. We will reply as soon as we can, and within any time the Act sets. You can also complain to the Data Protection Authority of Sri Lanka.
Changes to this policy
When we change this policy, we will publish the new version here and update the date at the top.
Contact us
Fundora IT Solutions, No. 395, Beach Road, Kattankudy - 03, Sri Lanka
Email: fundorait@gmail.com · Phone: +94 77 99 54 929