Privacy Policy

Last updated: 12 May 2026

1. Who we are

Bangles 22K (“we”, “us”) operates the website at www.bangles22k.com. This policy describes what personal information we collect about you, why, and what your rights are. The data controller is the individual sole proprietor operating the Service from Okara, Pakistan. Contact: support@bangles22k.com.

2. What we collect

When you visit the public site

  • Standard server logs (IP address, user agent, request path) — retained for up to 30 days for security and abuse-prevention purposes.
  • No third-party advertising or behavioral tracking cookies.

When you create an account

  • Email address and a hashed password (managed by Supabase Auth).
  • Optional: display name, locale (English / Urdu), default city.
  • Account creation timestamp.

When you use the product

  • Alerts you create (karat, threshold, channels — push or email).
  • Portfolio entries you submit (item name, weight, karat, optional purchase price and date).
  • Browser push subscription tokens (endpoint + keys), only if you opt in.
  • Chat messages you send to the bilingual agent. Messages are sent to our LLM provider (Groq) for processing and are not stored beyond the active session.

When you subscribe to a paid plan

  • Payment is processed by our merchant of record, Paddle.com Market Limited. We do not see or store your card details.
  • We receive from Paddle: subscription status, customer ID, billing period, and country (for tax purposes).

3. How we use your data

  • To run the Service: deliver alerts, render your portfolio, respond to chat, manage your subscription.
  • To send transactional email (account verification, alert notifications, daily digest if subscribed, billing receipts).
  • To prevent abuse and secure the Service.
  • To comply with legal obligations.

We do not sell your data, do not share it with advertisers, and do not use it to train AI models.

4. Sub-processors

We rely on the following third parties to operate the Service:

  • Supabase — database, authentication, file storage. Data hosted in ap-south-1 (Mumbai).
  • Vercel — application hosting and CDN.
  • Groq — large-language-model inference for the chat agent. Messages are sent to Groq for processing.
  • Resend — transactional email delivery.
  • Paddle — payment processing and merchant of record (paid plans only).
  • GitHub Actions — scheduled background jobs (scrapers, alert evaluation, notification dispatch).

5. Data retention

  • Account data: retained until you delete your account. On deletion, we remove your profile, alerts, portfolio, and push subscriptions within 30 days.
  • Transactional email logs: retained for up to 90 days.
  • Server logs: up to 30 days.
  • Billing records: retained for 7 years to satisfy tax and accounting obligations (handled by Paddle).

6. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated data.
  • Export your data in a portable format.
  • Object to or restrict certain processing.
  • Withdraw consent for optional processing (e.g. push notifications) at any time.

To exercise these rights, email support@bangles22k.com. We respond within 30 days.

7. Cookies

We use only the cookies strictly necessary to keep you signed in and to keep your session secure (Supabase Auth session cookies). We do not use advertising cookies, analytics cookies, or third-party tracking pixels.

8. International transfers

Your data is stored on Supabase infrastructure in Mumbai (ap-south-1). Sub-processors may be located in the United States, Europe, or elsewhere. Where required, we rely on standard contractual clauses or equivalent safeguards for transfers.

9. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes affecting registered users will be communicated via email.

11. Contact

Questions or requests? support@bangles22k.com or write to: Bangles 22K, House 53, Aziz Housing Scheme, Okara 56300, Pakistan.

See also our Terms of Service and Refund Policy.