बंधकी

This Privacy Policy describes how बंधकी ("we", "our", or "the app") collects, uses, and protects the information you provide when using our mobile application. By using बंधकी, you agree to the practices described in this policy.

1. Information We Collect

We collect only the information necessary to run the app:

• Account info: Name, email address, and password (stored as a secure hash).
• Business data: Shop name, customer names, mobile numbers, and pledge records you enter.
• Photos: Item images you upload for a pledge entry (stored on Cloudinary).
• Payment references: UTR / transaction IDs you submit for plan upgrades.
• Device info: Platform (Android/iOS) and app version for support purposes.

We do not collect your location, contacts, call logs, or any data unrelated to pledge management.

2. How We Use Your Information

• To create and manage your account and shops.
• To store and display your pledge (बंधक) records accurately.
• To calculate interest and generate payment history.
• To process plan upgrade requests via manual UPI payment verification.
• To respond to feedback and support queries you submit.
• To send OTP emails for account verification and password reset.

3. Data Storage & Security

Your data is stored on secure cloud servers (MongoDB Atlas) hosted in a reliable data centre. Passwords are never stored in plain text — they are hashed using bcrypt. Access tokens are short-lived (15 minutes) and refresh tokens are stored as hashed values.

We use HTTPS for all data transmission. Images are stored on Cloudinary with private access controls.

4. Data Sharing

We do not sell, trade, or rent your personal information to any third party.

We use the following trusted third-party services that may process your data solely to provide their services:

• MongoDB Atlas — database hosting
• Cloudinary — image storage
• Vercel — API hosting
• Gmail SMTP — OTP email delivery

5. Your Rights

• Access: You can view all your data inside the app at any time.
• Correction: You can edit your profile, shop, and customer details.
• Deletion: You can request complete deletion of your account and all associated data by emailing us. We will process it within 7 business days.
• Export: Paid plan users can export their data from the app.

6. Account Deletion

To delete your account and all data permanently, email us at sonisahil9905@gmail.com with the subject "Delete My Account" and the email address linked to your account. All your data — pledges, customers, payments, and photos — will be permanently deleted within 7 business days.

7. Children's Privacy

बंधकी is intended for use by jewellers and business owners. We do not knowingly collect data from anyone under the age of 18.

8. Changes to This Policy

We may update this policy from time to time. Any changes will be reflected on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Permissions Used

• Camera / Storage: To capture or pick photos of pledged gold items.
• Internet: To sync data with our servers.

No other device permissions are requested or used.