Mujahid.pk Pakistan-focused beta commerce service hai. Privacy sawal ya request ke liye privacy@mujahid.pk par rabta karein.
Hum kya data lete hain
- Account data: naam, email, Supabase user ID aur optional phone/city.
- Order data: delivery name, phone, address, items, amount aur order status.
- Support data: ticket subject, message, contact detail aur optional order ID.
- Security data: signed session record, limited device/user-agent hash aur audit events.
- Preference data: cart, wishlist, selected city aur marketing consent.
- Delivery operations data: active delivery ke dauran rider location, receiver name, delivery proof note, failed-delivery reason aur reschedule detail.
- COD operations data: rider cash collection, cash-handover amount, reference aur related audit record.
Use ka maqsad
Data account security, order fulfillment, delivery, returns, customer support, fraud prevention, inventory reservation, financial records aur app improvement ke liye use hota hai. Rider location sirf active delivery coordination, customer tracking aur operational safety ke liye process hoti hai. Marketing sirf recorded consent ke mutabiq hoti hai.
Service providers
Supabase database aur authentication provide karta hai. Google sign-in select karne par Google OAuth process karta hai. Hosting, email ya delivery providers launch setup ke mutabiq limited data process kar sakte hain. Hum PIN, wallet password ya card secret collect nahi karte.
Storage aur retention
Sessions default 30 din tak, audit logs default 365 din tak aur order/business records default 2,555 din tak retain ho sakte hain. Delivery proof aur COD handover records operational, dispute aur financial reconciliation ke liye relevant order/business retention period ke mutabiq retain ho sakte hain. Admin lawful operational need ke mutabiq configured limits manage karta hai. Account anonymization ke baad zaroori business record reh sakta hai magar direct personal fields remove kiye jate hain.
Aap ke controls
Logged-in Privacy Center se data export, marketing consent change aur account anonymization request available hai. Correction ya deletion ke liye privacy email par request bheji ja sakti hai; identity verification zaroori ho sakti hai.
Security aur children
RLS, server-side authorization, encrypted HTTPS transport, session revocation aur audit logs use hote hain. Koi internet system zero-risk nahi hota. Service 18 saal se kam users ke liye parent/guardian supervision ke baghair intended nahi hai.
Changes
Material change par policy version aur effective date update ki jayegi. Service use jari rakhne se current policy apply hoti hai.