Privacy Policy

1. Who We Are

SRT Royal ("we", "us") operates a designer marketplace at this website. This policy explains what personal data we collect, why we collect it, and the choices you have. It applies to visitors, clients, and designers who use the platform.

2. Data We Collect

• Account data: name, email, hashed password, role, profile details (company, phone, photo, bio) you choose to add.
• Hire request data: project title, description, budget, timeline, style preference, and the contact details you type into the form (name, email, WhatsApp).
• Contact form messages: name, email, phone, and message content.
• Platform activity: projects, reviews, notifications, and basic technical logs (IP address, timestamps) kept for security and abuse prevention.

3. How We Use It

• To create and secure your account (passwords are stored only as bcrypt hashes).
• To match hire requests with designers and keep both sides updated through notifications.
• To send you service emails: password resets and request updates. No marketing lists.
• To operate, monitor, and protect the platform (rate limiting, abuse detection).

4. Sharing

We do not sell your data. We share only what is needed to run the platform:

• Designers receive the hire requests addressed to them.
• Service providers: MongoDB Atlas (database hosting), our hosting provider, and — when configured — an email delivery provider for transactional mail. Payment gateways (bKash/Nagad/SSLCommerz) process payment data on their own secure pages.

5. Cookies & Local Storage

We use no advertising or tracking cookies. After sign-in, your session token is kept in your browser's local or session storage (depending on "Remember me") so you stay logged in. Signing out removes it.

6. Data Retention

Account and project data is kept while your account is active. Contact messages are retained for service records. You may request deletion of your account and personal data at any time via email.

7. Your Rights

• Access, correct, or delete your profile data from your account page.
• Request a copy or deletion of your personal data by writing to us.
• Withdraw consent by deleting your account.

8. Security

Passwords are hashed (bcrypt), traffic is served over HTTPS, and the API uses rate limiting and security headers. No system is perfect — if you believe data was exposed, contact us immediately.

9. Children

The platform is not directed at children under 16, and we do not knowingly collect their data.

10. Contact

Privacy questions or requests: tawsifgaming373@gmail.com or via the contact page.