Privacy Policy

Several forms and interactive tools on this website are designed for client demonstration purposes:

• Contact Inquiries: When you submit an inquiry via the Contact form (/contact), your entered details (name, contact email, phone number, interested service, package tier, and project requirements) are transmitted over TLS to our NestJS backend on Cloud Run and recorded in Google Cloud Firestore Native mode (asia-south1 Mumbai region). Inquiries submitted by unauthenticated guests are recorded as guest inquiries and are never linked to any customer account simply by email match. Inquiries submitted by signed-in users are linked to their authenticated account UID, allowing them to view progress and reply via their Client Portal. Durable abuse protection uses non-reversible SHA-256 IP hash slices without storing raw IP addresses.
• Account & Dashboard: The login and register pages operate in demonstration mode when live Firebase configuration is unavailable. In demonstration mode, entering sample details creates a temporary in-memory session for UI evaluation without transmitting data to a remote backend. If Firebase Authentication is enabled, sign-in or registration information is sent to Firebase for authentication processing. Depending on the configured Firebase persistence mode, the Firebase SDK may retain authentication state and tokens in browser-managed storage. This application does not intentionally store raw account passwords in its own localStorage or custom session system.
• Direct Order System & Project Scoping: When an authenticated client submits an order via the Direct Order Wizard (/order), project specifications (customer contact, business name, preferred contact method, objective, detailed scope, and budget) are transmitted over TLS to our authenticated NestJS backend on Cloud Run and stored in Google Cloud Firestore Native mode (asia-south1 region). Direct client access to the database is blocked by security rules; all access requires valid Firebase authentication ID tokens.
• Newsletter Notice: The newsletter section displays an informative status notice only and does not collect or transmit email addresses to an external mailing list provider.

We prioritize privacy and minimize data storage. The application uses standard browser storage strictly for essential user preferences:

• localStorage.getItem('theme'): Remembers your dark/light appearance preference across visits.
• localStorage.getItem('language'): Remembers your language selection (English or Bengali).
• Client State & Authentication Persistence: In demonstration mode, active UI sessions exist solely in browser memory and are not persisted to disk. If Firebase Authentication is enabled, the Firebase SDK may maintain authentication state and tokens in browser-managed storage (such as IndexedDB or localStorage) according to its configured persistence mode. This application does not store account passwords in its own localStorage or client storage.

We do not employ third-party advertising trackers or invasive profiling cookies.

This website loads certain imagery and static demonstration assets from third-party content distribution networks (including Unsplash at images.unsplash.com).

When your browser retrieves these assets, standard technical request information (such as your IP address and browser user agent) is transmitted to the third-party asset provider as an inherent part of HTTP content delivery.

This website is hosted on Firebase Hosting (Google Cloud Platform). Hosting and third-party providers may process technical request information according to their own services and policies.

This may include standard HTTP request data such as IP addresses, browser headers, referring URLs, timestamps, and requested paths as part of ordinary web traffic delivery, routing, performance optimization, and DDoS mitigation.

Our website may contain links to external websites, developer tools, or documentation. Clicking these links navigates away from our site to third-party domains governed by their own independent privacy notices and terms. AJ IT Solution does not control and assumes no responsibility for the privacy practices or content of external destinations.

If you have any questions about this privacy disclosure, data handling on this website, or would like to discuss digital services, please contact us directly: