Privacy Policy
Last Updated: December 11, 2025
At JiMerhba, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using JiMerhba, you consent to the data practices described in this policy.
1. Information We Collect
1.1 Personal Information
We collect information that you provide directly to us, including:
- Account Information: Name, email address, password, phone number, nationality
- Identity Verification: Government-issued ID documents (passport, national ID, driver's license)
- Profile Information: Profile photos, languages spoken, personal preferences
- Booking Information: Wedding selections, guest count, introductions, dietary preferences
- Payment Information: Processed securely through Stripe (we do not store credit card details)
- Communication Data: Messages sent through our contact form or support system
1.2 Automatically Collected Information
When you use JiMerhba, we automatically collect certain information:
- Usage Data: Pages visited, features used, time spent on platform
- Device Information: IP address, browser type, operating system, device identifiers
- Cookies: Small data files stored on your device (see Section 7)
- Log Data: Error logs, access times, referring URLs
2. How We Use Your Information
We use your information for the following purposes:
- Account Management: Create and manage your account, verify your identity
- Bookings & Transactions: Process bookings, facilitate payments, manage reservations
- Communication: Send booking confirmations, updates, support responses, and important notices
- Platform Improvement: Analyze usage patterns, improve features, fix bugs
- Security: Detect fraud, prevent abuse, protect against security threats
- Legal Compliance: Comply with legal obligations, respond to lawful requests
- Marketing: Send newsletters and promotional content (you can opt out anytime)
3. Data Storage & Security
3.1 Data Storage
Your data is stored securely on servers provided by:
- Vercel: Platform hosting and deployment
- Database Provider: Currently SQLite (development), migrating to PostgreSQL (production)
- File Storage: Uploaded photos and documents stored securely
3.2 Security Measures
We implement industry-standard security measures to protect your data:
- Encryption of passwords using bcrypt hashing
- HTTPS/SSL encryption for all data transmission
- Rate limiting to prevent abuse and attacks
- Input validation and sanitization to prevent XSS and SQL injection
- Regular security audits and updates
- Access controls limiting who can view your data
4. Third-Party Services
JiMerhba uses the following third-party services that may collect your data:
Resend (Email Service)
Purpose: Sending transactional emails (verification, bookings, notifications)
Data Shared: Email address, name
Privacy Policy: resend.com/legal/privacy
Stripe (Payment Processing)
Purpose: Processing payments and payouts (once enabled)
Data Shared: Payment details, transaction information
Privacy Policy: stripe.com/privacy
Vercel (Hosting)
Purpose: Platform hosting and deployment
Data Shared: Usage logs, performance data
Privacy Policy: vercel.com/legal/privacy-policy
5. Data Sharing & Disclosure
We do not sell your personal information. We may share your data in the following circumstances:
- With Hosts/Guests: When you book a wedding, hosts see your profile and booking details
- Service Providers: Third-party vendors who help us operate the platform (email, payments, hosting)
- Legal Requirements: If required by law, court order, or government request
- Business Transfers: In case of merger, acquisition, or sale of assets
- With Your Consent: Any other sharing with your explicit permission
6. Your Rights (GDPR Compliance)
If you are in the European Union, you have the following rights under GDPR:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing of your data
- Right to Withdraw Consent: Withdraw consent for data processing at any time
To exercise these rights, contact us at zakarianacer1937@gmail.com
7. Cookies
JiMerhba uses cookies and similar technologies to:
- Keep you logged in (session cookies)
- Remember your preferences (language, settings)
- Analyze platform usage and performance
- Improve security and prevent fraud
You can control cookies through your browser settings, but disabling them may affect platform functionality.
8. Data Retention
We retain your personal data for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal obligations (tax, accounting, regulatory requirements)
- Resolve disputes and enforce agreements
- Prevent fraud and abuse
When you delete your account, we will delete or anonymize your data within 30 days, except where we are legally required to retain it.
9. Children's Privacy
JiMerhba is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately, and we will delete it.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. Your continued use of JiMerhba after changes constitutes acceptance of the updated policy.
12. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
Disclaimer: This is a template Privacy Policy. Before launching to production, please have this policy reviewed by a qualified attorney to ensure compliance with GDPR, CCPA, and other applicable privacy laws in your jurisdiction.
