Privacy Policy

Gurbat is owned and operated by RAMEXAR LLC, a limited liability company organized in the United States ("RAMEXAR LLC", "Gurbat", "we", "our", or "us"). We operate the Gurbat mobile application and website (gurbat.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By accessing or using the platform, you consent to the data practices described in this Privacy Policy. We are committed to protecting your privacy and ensuring transparency about our data practices.

Account Information: When you create an account, we collect your username, email address, and profile photo. You may also provide an optional phone number and biography. User Content: Posts, comments, messages, images, and other content you create or share on the platform. Usage Data: We may collect information about how you access and use the platform, including device information, IP address, browser type, pages visited, and interaction patterns. Community Information: If you create or run a community, you provide where it is based, a public owner name, one or two contact numbers, an email address and the owner's postal address. The location, the owner name, the contact numbers and the email are shown to signed-in users on the community page. The address is never shown publicly: only the community's owner and admins and the Gurbat team can see it, and we use it to verify communities. Security and Suspension Data: To protect accounts and to enforce suspensions under Section 6 of our Terms of Service, when you sign in and while you use Gurbat (at most about once an hour) we record a device identifier, the IP address you connect from, the platform (iOS, Android or web) and your app or browser version. The device identifier is a random identifier created by Gurbat and stored in your browser or in the app or, where available, the identifier your device's platform provides to our app (the iOS identifier for vendor or the Android ID); it is never an advertising identifier. While you are signed out, the identifier and IP address are only checked against active suspensions and are not stored. These records are kept for 90 days after the device was last used. They are kept longer only while an account, device or network is under a suspension: device records for the length of the suspension, and IP addresses for at most the first 30 days of it. This data is used only for security, fraud prevention and enforcing suspensions; it is never sold, never shared for advertising, and never used for ads or to track you across other companies' apps or websites. We process it on the basis of our legitimate interest in keeping the Platform safe. Payment Information: Paid services (for example Green Card registration or premium listings) are purchased on our website at gurbat.com, where payment data is processed securely by Stripe. The Gurbat mobile apps do not process any payments. We do not store your credit card details.

We use the information we collect to: provide, maintain, and improve the platform; enable communication between users through posts, comments, and direct messages; send notifications related to your account activity; moderate content and enforce our community guidelines; process payments and deliver purchased services; personalize your experience; and ensure the security and integrity of our platform.

We do not sell, trade, or rent your personal information to third parties. Your public profile information (username, avatar, posts) is visible to other users. Direct messages are visible to the people in the conversation. Gurbat administrators may review messages, including private messages and their attachments, when needed to enforce our rules, investigate reports, keep users safe or comply with the law; access is limited to authorized administrators and is recorded. We may share information if required by law or to protect the rights and safety of our users.

Your data is stored securely using Supabase infrastructure with encryption in transit (TLS) and at rest. We implement appropriate technical and organizational measures to protect your personal information, including Row-Level Security (RLS) policies on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our platform uses the following third-party services: • Supabase: Database, authentication, file storage, and real-time features • Stripe: Secure payment processing • Vercel: Website hosting and deployment • OpenAI: automatic content moderation (text and photos) and the sign-up name check Each of these services has their own privacy policies. We encourage you to review their policies for more information about how they handle your data.

We use cookies and local storage to: maintain your login session; remember your language preference; store your theme preference (light/dark mode); remember your cookie consent choice; keep a random device identifier used for security and to enforce suspensions (see Section 2); and improve platform performance. You can control cookies through your browser settings. Essential cookies are required for the platform to function properly.

Under GDPR (European users) and CCPA (California residents), you have the right to: • Access: Request a copy of your personal data • Rectification: Update or correct your information • Erasure: Request deletion of your account and data • Data Portability: Export your data in a machine-readable format (JSON) • Restriction: Request that we limit processing of your data • Objection: Object to certain types of data processing • Non-Discrimination: We will not discriminate against you for exercising your rights To exercise these rights, visit your Profile Settings or contact us at support@gurbat.com. We will respond to requests within 30 days.

Your data may be transferred to and processed in the United States, where our servers and service providers are located. If you are located in the European Economic Area (EEA), please note that by using the Platform, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

We retain your personal data for as long as your account is active. When you delete your account, your profile data, posts, comments, and messages are permanently deleted. Some data may be retained for up to 30 days in backups. Device identifiers and IP addresses recorded for security are kept for 90 days (longer only during a suspension), as described in Section 2. Anonymous aggregated data (e.g., usage statistics) may be retained indefinitely as it cannot be linked to you. Payment transaction records are retained for 7 years as required by tax and financial regulations.

Our platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on the Platform and updating the "Last updated" date. We encourage you to review this policy periodically.

By creating an account and using the platform, you expressly consent to the collection, processing, storage, and transfer of your information as described in this Privacy Policy, including transfer to and storage in the United States. You acknowledge that no online platform can guarantee absolute security, and you agree that RAMEXAR LLC shall not be liable for any unauthorized access, breach, loss, or misuse of data that may occur despite our implementation of reasonable, industry-standard safeguards. Your continued use of the platform constitutes your ongoing acceptance of this Privacy Policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: support@gurbat.com