Your details deserve care.
This starter policy explains the intended privacy controls. Before public launch, replace it with a policy reviewed for your business and applicable Pakistani law.
Profile visibility
Profiles remain pending until an administrator approves them. Public listings exclude private photos, email addresses and phone numbers.
Photo permissions
Photo delivery is checked on the server. Access requires an approved profile, the profile owner's photo visibility setting, an eligible active account and a current per-user permission, or administrator access.
Shared links
Only administrators can generate profile share links. Links use random secret tokens, expire automatically, can be revoked, and exclude photos and direct contact details. Anyone holding an active link may read the shared biodata, so share it only with intended recipients.
Account security
Passwords are stored as password hashes. Database access uses prepared statements. Forms use CSRF tokens. These safeguards do not replace HTTPS, backups, monitoring, rate limiting, secure hosting configuration or security testing.
Consent and data removal
Collect only information you need, obtain informed consent, provide a contact for correction/deletion requests, define retention periods, and ensure profile owners can withdraw photo consent. These workflows should be finalized before launch.