Privacy Policy

This policy covers everyone who interacts with TaameerPro: workspace owners and team members, clients and vendors who are given portal access, and visitors to this website. TaameerPro is operated from Lahore, Pakistan.

For most of the data in a workspace — project records, workforce details, client contacts — your organization decides what is entered and who sees it; we process that data on the organization’s instructions to provide the Service.

• Account data — name, email address, optional phone number, preferred language, and a hashed password (we never store passwords in plain text). If you enable two-factor authentication, the TOTP secret is stored encrypted.
• Workspace data — everything your organization enters to run its projects: projects and stages, procurement records, workforce records (including labourer names, attendance, and payroll figures), financial entries, client and vendor contact details, and uploaded documents and photos.
• Billing data — your plan, subscription status, and invoice history. Card details are collected and stored by Stripe, our payment processor; they never touch our servers.
• Security and usage logs — IP address, browser user-agent, and an audit trail of significant actions inside the workspace (who changed what, and when). These exist to protect accounts and to give administrators accountability.

• to provide, operate, and back up the Service;
• to secure accounts — login rate limiting, lockout after repeated failures, session management, and audit logging;
• to send transactional email (verification, password reset, invitations, notifications your workspace has enabled, billing and trial reminders) — we do not send third-party marketing;
• to process subscription payments through Stripe;
• to generate AI insights, only when you use an AI feature, by sending the relevant project data to Google Gemini.

We do not sell personal data, and we do not share it with advertising networks or data brokers.

These are the only third parties that process your data, and only for the purpose stated:

• DigitalOcean — cloud infrastructure hosting the application and database.
• Cloudflare R2 — private storage for uploaded files (documents, photos) and encrypted-at-rest database backups; files are served through short-lived signed links.
• Stripe — subscription payments. Stripe holds all card data; we store only non-sensitive billing references.
• Google (Gemini) — AI analysis, invoked only when your workspace uses an AI feature.
• Email (SMTP) provider — delivery of transactional email.

A more detailed operational view — what data each provider sees and why — is on the Data Processing page. We will update this list before adding a new provider.

The honest, short list:

• Refresh-token cookie — an httpOnly, essential-only cookie that keeps you signed in securely. It is not readable by page scripts and is not used for tracking.
• Browser local storage — your theme, language preference, workspace identifier, and (for client/vendor portals) the portal session token.

There are no advertising or third-party analytics cookies on this site, which is why you do not see a cookie consent banner.

• Workspace data is kept for as long as your organization's account is active.
• Read in-app notifications are deleted automatically after 90 days.
• Workspace audit logs are retained for 90 days.
• Automated database backups are kept on a rotating schedule — older snapshots are replaced as new ones are taken.
• If your organization deletes its account, the workspace is purged permanently after the 30-day grace period; backup copies age out as the backup rotation replaces them.

• View and correct your account details and workspace data directly in the app.
• Request a copy of your organization’s data by contacting us via the contact page; a self-serve export is on our roadmap.
• Delete your organization and all its data via Settings (30-day grace period, then permanent purge).
• Portal users (clients and vendors): access is issued and managed by the organization that invited you — direct your requests to them, and we will support the organization in fulfilling them.

• encryption in transit (HTTPS/TLS) for all traffic;
• passwords hashed with bcrypt; two-factor authentication secrets encrypted at rest;
• short-lived access tokens with rotated, hashed refresh tokens and reuse detection;
• role-based access control and per-organization data isolation enforced at the data layer;
• login rate limiting and automatic account lockout;
• audit trails of significant actions;
• scheduled automated backups.

We do not currently hold formal security certifications (such as SOC 2 or ISO 27001) and do not claim them. The Data Processing page describes the architecture factually for procurement reviews.

TaameerPro is a workplace tool and is not directed at children. Do not create accounts for anyone under 18.

Material changes are published here as a new dated version, recorded in the changelog below, and notified to workspace administrators.

For privacy questions or requests, reach us through the contact page.