We collect information you provide directly to us, including: - **Personal Information:** Name, email address, phone number, company name when you fill out our contact form, subscribe to our newsletter, or apply for a position. - **Project Information:** Details about your project requirements, budget, and timeline shared through our consultation forms. - **Account Information:** If you create an account for our admin dashboard or client portal, we collect login credentials and profile information. - **Communication Data:** Records of correspondence when you contact us via email, chat, or phone. We also automatically collect certain technical information when you visit our website, including IP address, browser type, device information, pages visited, and referring URLs.

We use the information we collect to: - Respond to your inquiries and provide requested services - Process job applications and manage the recruitment process - Send you newsletters, updates, and marketing communications (with your consent) - Improve our website, services, and user experience - Analyze usage patterns and optimize performance - Comply with legal obligations and protect our rights - Detect, prevent, and address technical issues and security threats We never sell your personal information to third parties. We only share data with service providers who need it to help us operate our business, and they are contractually bound to protect your information.

We use minimal, privacy-respecting tracking on our website: - **Essential Cookies:** Required for basic website functionality, authentication, and security. These cannot be disabled. - **Analytics:** We use Plausible Analytics, a privacy-focused, cookie-free analytics platform that does not track individual users or collect personal data. - **Theme Preference:** We store your light/dark mode preference using a cookie for a consistent experience across visits. - **Locale Preference:** Your language preference (English/Bangla) is stored to serve content in your preferred language. We do NOT use: - Third-party advertising cookies - Social media tracking pixels - Cross-site tracking technologies - Fingerprinting or invasive tracking methods

We integrate with the following third-party services to operate our website and business: - **Neon (PostgreSQL):** Database hosting for application data - **Cloudflare:** CDN, DDoS protection, and DNS services - **Resend / SMTP:** Email delivery for contact form submissions and newsletters - **Plausible Analytics:** Privacy-respecting website analytics - **Cloudflare R2:** Secure file storage for uploaded media Each of these services has their own privacy policies, and we encourage you to review them. We select service providers that prioritize data protection and comply with applicable regulations.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected: - **Contact Form Submissions:** Retained for 2 years after last interaction, then permanently deleted - **Newsletter Subscriptions:** Retained until you unsubscribe, then deleted within 30 days - **Job Applications:** Retained for 1 year after the position is filled, then deleted - **Analytics Data:** Aggregated, anonymous data retained indefinitely; no personal data is stored - **Account Data:** Retained as long as your account is active; deleted within 90 days of account closure You may request deletion of your data at any time by contacting us at privacy@waafitech.com.

Depending on your jurisdiction, you may have the following rights regarding your personal data: - **Right of Access:** Request a copy of the personal data we hold about you - **Right to Rectification:** Request correction of inaccurate or incomplete data - **Right to Erasure:** Request deletion of your personal data ("right to be forgotten") - **Right to Restrict Processing:** Request that we limit how we use your data - **Right to Data Portability:** Receive your data in a structured, machine-readable format - **Right to Object:** Object to processing of your data for marketing purposes - **Right to Withdraw Consent:** Withdraw consent at any time where processing is based on consent To exercise any of these rights, contact us at privacy@waafitech.com. We will respond within 30 days.

If you have any questions about this Privacy Policy or our data practices, please contact us: - **Email:** privacy@waafitech.com - **General Inquiries:** hello@waafitech.com - **Website:** waafitech.com/contact We take data protection seriously and will address any concerns promptly. This policy is reviewed and updated regularly to reflect changes in our practices and applicable laws.