Privacy Policy
Last updated: January 2026
At Jonosakti, we believe in transparency and respect for your privacy. This policy explains how we collect, use, share, and protect your personal information.
Quick Summary
- We don't sell your data. Never have, never will.
- We collect only what's needed to provide our services.
- You control your data through account settings.
- We use encryption to protect your information.
- You can delete your account and data at any time.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, and password when you register
- Profile Information: Bio, location, website, and avatar (optional)
- Content: Petitions, articles, campaigns, comments, and other content you create
- Communications: Messages to our support team or other users
- Payment Information: For crowdfunding contributions (processed by third-party payment providers)
1.2 Information Collected Automatically
- Device Information: Browser type, operating system, device type
- Usage Data: Pages visited, features used, time spent on platform
- Log Data: IP address, access times, referring URLs
- Cookies: Session and preference data (see our Cookie Policy)
1.3 Information from Third Parties
If you sign in through a social login provider (future feature), we may receive basic profile information from that provider.
2. How We Use Your Information
We use your information to:
- Provide Services: Operate the platform, display your content, enable interactions
- Personalize Experience: Show relevant content, remember preferences
- Communication: Send notifications about activity, updates, and security alerts
- Improve Platform: Analyze usage patterns, fix bugs, develop new features
- Security: Detect fraud, prevent abuse, protect users
- Legal Compliance: Comply with laws and respond to legal requests
3. How We Share Your Information
3.1 Public Information
Your public profile, petitions, articles, comments, and other content you post are visible to other users and may be indexed by search engines.
3.2 Service Providers
We share data with trusted service providers who help us operate the platform:
- Cloudflare: Hosting, security, and content delivery
- Resend: Email delivery services
- Payment Processors: For processing crowdfunding contributions
3.3 Legal Requirements
We may disclose information when required by law, court order, or to protect our rights and safety.
3.4 What We Don't Do
We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.
4. Your Rights and Choices
4.1 Access and Update
You can access and update your personal information anytime through Settings.
4.2 Data Export
You can request a copy of your data by contacting privacy@jonosakti.org.
4.3 Delete Account
You can delete your account and associated data through Settings > Account > Delete Account. Some information may be retained for legal or legitimate business purposes.
4.4 Email Preferences
Control which emails you receive through Settings > Notifications. You can opt out of marketing emails while still receiving essential account notifications.
4.5 Privacy Settings
Control your profile visibility and other privacy options through Settings > Privacy.
5. Data Security
We implement multiple security measures:
- Encryption: All data transmitted using HTTPS/TLS encryption
- Password Security: Passwords are hashed using industry-standard algorithms
- Access Controls: Strict internal access controls to user data
- Infrastructure Security: Cloudflare protection against DDoS and other attacks
- Regular Audits: Periodic security reviews and updates
While we strive to protect your data, no system is 100% secure. Report any security concerns to security@jonosakti.org.
6. Data Retention
We retain your data as long as your account is active or as needed to provide services. After account deletion:
- Personal profile data is deleted immediately
- Public content (petitions, articles) may be anonymized rather than deleted
- Backup data is purged within 30 days
- Legal compliance data may be retained as required by law
7. Children's Privacy
Jonosakti is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal information, please contact us immediately at privacy@jonosakti.org.
8. International Data Transfers
Your data may be processed in countries outside your own, including the United States where our cloud infrastructure is located. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
9. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be communicated via email or platform notification. Your continued use after changes constitutes acceptance.
10. Contact Us
For privacy-related questions or requests:
- Email: privacy@jonosakti.org
- Data Protection Officer: dpo@jonosakti.org
- Address: Dhaka, Bangladesh
Additional Rights for Specific Regions
European Union (GDPR)
EU residents have additional rights including: right to access, rectification, erasure, data portability, and the right to lodge complaints with supervisory authorities.
California (CCPA)
California residents have rights to know what data we collect, request deletion, and opt out of any sale of personal information (we don't sell data).