Privacy Policy

Gurbat is owned and operated by RAMEXAR LLC, a limited liability company organized in the United States ("RAMEXAR LLC", "Gurbat", "we", "our", or "us"). We operate the Gurbat mobile application and website (gurbat.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By accessing or using the platform, you consent to the data practices described in this Privacy Policy. We are committed to protecting your privacy and ensuring transparency about our data practices.

Account Information: When you create an account, we collect your username, email address, and profile photo. You may also provide an optional phone number and biography. User Content: Posts, comments, messages, images, and other content you create or share on the platform. Usage Data: We may collect information about how you access and use the platform, including device information, IP address, browser type, pages visited, and interaction patterns. Payment Information: Paid services (for example Green Card registration or premium listings) are purchased on our website at gurbat.com, where payment data is processed securely by Stripe. The Gurbat mobile apps do not process any payments. We do not store your credit card details.

We use the information we collect to: provide, maintain, and improve the platform; enable communication between users through posts, comments, and direct messages; send notifications related to your account activity; moderate content and enforce our community guidelines; process payments and deliver purchased services; personalize your experience; and ensure the security and integrity of our platform.

We do not sell, trade, or rent your personal information to third parties. Your public profile information (username, avatar, posts) is visible to other users. Direct messages are only visible to conversation participants. We may share information if required by law or to protect the rights and safety of our users.

Your data is stored securely using Supabase infrastructure with encryption in transit (TLS) and at rest. We implement appropriate technical and organizational measures to protect your personal information, including Row-Level Security (RLS) policies on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our platform uses the following third-party services: • Supabase — Database, authentication, file storage, and real-time features • Stripe — Secure payment processing • Vercel — Website hosting and deployment • Google Gemini API — AI-powered features Each of these services has their own privacy policies. We encourage you to review their policies for more information about how they handle your data.

We use cookies and local storage to: maintain your login session; remember your language preference; store your theme preference (light/dark mode); remember your cookie consent choice; and improve platform performance. You can control cookies through your browser settings. Essential cookies are required for the platform to function properly.

Under GDPR (European users) and CCPA (California residents), you have the right to: • Access: Request a copy of your personal data • Rectification: Update or correct your information • Erasure: Request deletion of your account and data • Data Portability: Export your data in a machine-readable format (JSON) • Restriction: Request that we limit processing of your data • Objection: Object to certain types of data processing • Non-Discrimination: We will not discriminate against you for exercising your rights To exercise these rights, visit your Profile Settings or contact us at support@gurbat.com. We will respond to requests within 30 days.

Your data may be transferred to and processed in the United States, where our servers and service providers are located. If you are located in the European Economic Area (EEA), please note that by using the Platform, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

We retain your personal data for as long as your account is active. When you delete your account, your profile data, posts, comments, and messages are permanently deleted. Some data may be retained for up to 30 days in backups. Anonymous aggregated data (e.g., usage statistics) may be retained indefinitely as it cannot be linked to you. Payment transaction records are retained for 7 years as required by tax and financial regulations.

Our platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on the Platform and updating the "Last updated" date. We encourage you to review this policy periodically.

By creating an account and using the platform, you expressly consent to the collection, processing, storage, and transfer of your information as described in this Privacy Policy, including transfer to and storage in the United States. You acknowledge that no online platform can guarantee absolute security, and you agree that RAMEXAR LLC shall not be liable for any unauthorized access, breach, loss, or misuse of data that may occur despite our implementation of reasonable, industry-standard safeguards. Your continued use of the platform constitutes your ongoing acceptance of this Privacy Policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: support@gurbat.com