Privacy Policy
Last updated: August 2026 Effective: 2026-09-05
This is a plain-English summary of how Berojgari collects, uses, and protects your information. Nepali translation available at berojgarihub.com/privacy/ne on launch.
If any term in this policy conflicts with our Terms of Service, this Privacy Policy controls where user privacy is concerned.
The short version
- We give you an anonymous username (
berojgar_XXXX). Other users never see your real identity. - We collect a small amount of technical information (email or phone for account recovery, IP for abuse prevention). We keep it private, we do not sell it, and we never link it publicly to your anonymous username.
- We do not sell your data to anyone.
- We do not run behavioral advertising.
- You can request access to or deletion of your data at any time.
Who we are
Berojgari is operated by Sarjan Budha ("we", "us"). Contact: privacy@berojgarihub.com.
Information we collect
Information you give us
- Email address or phone number — for account creation, verification, and recovery
- Password (stored only as a cryptographic hash)
- OAuth account identifier — if you sign in via Google or Apple
- Profile information you choose to add — bio, interests, optional country
- Content you post — posts, comments, reports
Information we collect automatically
- Anonymous username — generated by us, tied to your account internally
- Login timestamps — for security
- IP address — for abuse prevention, spam detection, and legal compliance. We do not publish it. We store it in a form that is not linked to your public username in normal operation.
- Device / browser information — user agent, screen size, language — for spam detection and product improvement
- Activity on the platform — posts you view, Pushes, connections — for personalization and safety systems
Information we do not collect
- Location (beyond what you choose to add as a country tag)
- Contacts
- Camera or microphone (no permissions requested)
- Third-party account information beyond what OAuth provides for sign-in
- Data about your activity on other websites (no cross-site tracking)
- Your search queries. What you type into search is used to run that search and is not
recorded against your account. Your recent searches are stored in your own browser and never reach our servers — see *Data retention* below.
How we use information
- To operate the service (show you the feed, deliver notifications, apply your settings)
- To keep the platform safe (spam detection, abuse prevention, moderation, fraud prevention)
- To communicate with you (verification codes, security alerts, appeal responses)
- To improve the product (aggregate, non-identifying analytics)
- To comply with valid legal obligations
We do not use your information for:
- Advertising or behavioral profiling
- Selling to third parties
- Building shadow profiles about you
- Political campaigns
The anonymity promise
Your public username (berojgar_XXXX) is not visibly connected to your email, phone, or real identity anywhere in the product or in any public API response.
Internally, we maintain a link between your account and your registration information for account recovery, security, and moderation. This link is protected by our security controls and accessible only to authorized systems and personnel.
Honest limits of this promise:
- If you post content that identifies you, we cannot restore your anonymity.
- We may be legally compelled to disclose data by valid legal process in the operating jurisdiction. See "Legal requests" below.
- No system is perfectly secure. If we discover a breach affecting your identity information, we will notify you and relevant authorities as required by law.
How we share information
We share data only in these situations:
- With service providers that help us operate the platform (hosting, database, email delivery, error tracking, analytics). Each is bound by contract to protect your data and process it only for us. Current providers include Supabase, Vercel, Cloudflare, Sentry, PostHog, Resend, and OpenAI/Anthropic (for content moderation classification).
- With moderators who need to review reported content or accounts. Moderators see your public username and content, plus moderation history — not your email, phone, or IP.
- With law enforcement only in response to valid legal process. See "Legal requests."
- In an aggregate, non-identifying form for research, transparency reports, or product statistics.
We do not:
- Sell personal data
- Rent, license, or trade personal data
- Share data with advertisers
- Share data with data brokers
Cookies and similar technologies
We use cookies for:
- Authentication — keeping you logged in (strictly necessary)
- Security — CSRF protection, session validation (strictly necessary)
- Preferences — remembering your language and theme (functional)
- Analytics — understanding platform usage in aggregate (optional; only after your consent)
We also use your browser's local storage — which is not a cookie and is never transmitted with a request — for two things: your theme preference, and your recent searches. Local storage stays on the device that wrote it. Clearing your browser's site data removes both.
You can control optional cookies via the consent banner on first visit and in Settings. Strictly necessary cookies cannot be disabled while you are logged in.
We do not use cross-site tracking cookies. We do not participate in ad networks.
Content moderation and third-party classifiers
To moderate content at scale, we send content (posts, comments, reports) to third-party moderation classifiers (OpenAI Moderation and/or Anthropic). These providers process content on our behalf under contract and do not use it to train their models.
Human moderators may also review content that is flagged automatically or reported by users. Moderators see the content and the associated public username, but not your email, phone, or IP.
Data retention
| Data | Retention |
|---|---|
| Account information (email, phone) | Until you delete your account, then 30 days pending purge |
| Public content (posts, comments) | Until you delete it or your account, then 30 days pending purge |
| Backups | 30 days for daily backups; 7 days for PITR |
| Access logs (server) | 30 days |
| Audit logs (moderation actions) | Indefinitely, for accountability |
| Rate-limit / abuse detection records | 90 days |
| Search history | Never stored by us. Held in your browser's local storage, most recent 12 queries, until you clear it or clear your site data |
| Reports | 2 years (may be longer if part of an active investigation) |
Some information may be retained longer where required by law or to complete an ongoing investigation of abuse.
Your rights
Depending on your jurisdiction, you may have rights including:
- Access — request a copy of the data we hold about you
- Correction — correct inaccurate information
- Deletion — request deletion of your account and data
- Portability — receive your data in a portable format
- Objection — object to certain processing
- Complaint — lodge a complaint with your local data protection authority
To exercise any right, email privacy@berojgarihub.com from the address associated with your account. We will respond within 30 days.
Deleting your account:
- From Settings, select Delete Account.
- Your posts, comments, and profile are immediately hidden from the platform (soft-deleted).
- After 30 days, personal information is purged from live systems.
- Backups containing your data expire within 30 additional days.
- Some information may be retained in aggregated, non-identifying form (usage statistics) or where required by law (e.g., moderation records of banned accounts).
Legal requests
We disclose user data to law enforcement only in response to valid legal process (a subpoena, warrant, or court order) enforceable in the operating jurisdiction. We push back on overbroad requests. Where lawful, we notify affected users before disclosure.
We will publish an annual transparency report starting one year after public launch.
Children
Berojgari is not directed at children under 13. If you are under the minimum digital consent age in your jurisdiction, do not use the service. If we learn we have collected information from a child in violation of law, we will delete it.
International data transfers
Berojgari is hosted on infrastructure that may store or process data in regions outside Nepal (currently Asia-Pacific and, for some services, other regions). We select providers with appropriate security and data-protection practices and take contractual measures to protect your data.
Security
We use industry-standard security measures including encryption in transit and at rest, strict access controls, ongoing security testing, and regular backups. See docs/SECURITY.md for detail. No system is perfect; if we detect a breach, we will notify you and relevant authorities as required by law.
Changes to this policy
We may update this policy from time to time. Material changes will be announced in-app and by email at least 30 days before taking effect. Continued use after the effective date constitutes acceptance.
Contact
- Privacy questions:
privacy@berojgarihub.com - Security reports:
security@berojgarihub.com - Legal / law enforcement:
legal@berojgarihub.com - General support:
support@berojgarihub.com
*This policy is written to be understandable. If any part is unclear, please ask us at privacy@berojgarihub.com. This document is not a substitute for legal advice.*