Privacy Policy

1. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored securely with bcrypt hashing).

Profile Information: City, phone number, and profile photos you choose to upload.

Missing Person Reports: Names, ages, descriptions, photographs, last seen locations, and contact information for missing persons. This information is submitted voluntarily.

Officer Data: For search officers, we additionally collect: National ID number, emergency contacts, CV documents, city/region, and team rank.

Payment Information: Transaction IDs and mobile banking numbers for payment verification (we do NOT store full account credentials).

Technical Data: IP addresses, browser type, and usage logs for security and performance purposes.

Chat Messages: Support chat conversations are stored to improve service quality and for admin follow-up.

2. How We Use Your Information

We use collected information to:

• Operate and maintain the SafeAlerts platform
• Facilitate missing person searches and reunite families
• Verify and manage officer identities and ranks
• Process payments and donations
• Send service-related notifications (case updates, payment status)
• Improve platform features and user experience
• Prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do NOT use your information for advertising, marketing to third parties, or any purpose beyond finding missing persons and operating our platform.

3. Information Sharing

We share information only in these circumstances:

• Community Sharing: Missing person reports are shared publicly (without login) for name and photo, but full details require login.
• Officers: Approved officers can access case details relevant to their assignments.
• Law Enforcement: We may share information with Bangladesh Police or authorized agencies when legally required or when it helps find a missing person.
• Service Providers: We use trusted third-party services (hosting, email) who are bound by confidentiality agreements.
• Emergency Situations: We may share information to prevent imminent harm.

We never sell your personal data to any third party.

4. Public vs. Private Information

We operate a tiered visibility model:

• Public (no login required): Missing person name, photo, case number, and status
• Registered Users: Full case details including last seen location, description, and contact information
• Officers: Assigned case details, officer profiles (name, age, rank, member ID)
• Admins / Chiefs: Full user profiles, complete case data, payment records, all management functions

User profile pages are shareable via unique links. Unregistered visitors can only see your name, age, photo, and city.

5. Cookies & Tracking

SafeAlerts uses minimal cookies:

• Session Cookie: Required for login functionality (deleted when browser closes)
• Preference Cookies: Stores your dark/light mode and language preference (localStorage)
• No Third-Party Trackers: We do not use Google Analytics, Facebook Pixel, or other tracking services

You can clear cookies through your browser settings at any time. This will log you out of the platform.

6. Data Security

We implement industry-standard security measures:

• Passwords hashed with bcrypt (never stored in plain text)
• HTTPS encryption for all data transmission
• SQL injection prevention via prepared statements
• File upload restrictions (type, size validation)
• Upload directories protected from direct PHP execution
• Session-based authentication with secure tokens
• Regular security audits and updates

Despite these measures, no system is 100% secure. Please report any security vulnerabilities to security@SafeAlerts.com.bd.

7. Data Retention

• Active Reports: Kept until the user requests removal or the case is marked "Solved"
• User Accounts: Retained as long as the account is active
• Deleted Accounts: Personal data removed within 30 days; anonymized usage data may be retained
• Payment Records: Kept for 7 years for financial compliance
• Chat Logs: Retained for 1 year for support quality review
• Found Cases: Reports for found persons are archived (not deleted) for 2 years

8. Your Rights

You have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Update inaccurate information through your profile settings
• Deletion: Request deletion of your account and associated data
• Withdrawal: Remove reports you have submitted at any time
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data in certain circumstances

To exercise these rights, contact us at privacy@SafeAlerts.com.bd or use the chat support widget.

9. Children's Privacy

SafeAlerts accounts require users to be at least 16 years old. We do not knowingly collect personal data from children under 16. However, missing person reports for children are permitted and encouraged as part of our core mission.

Photos and personal information of missing children are treated with the highest level of sensitivity. This information is only used for search purposes and is never shared beyond what is necessary to find the child.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of significant changes via email or an in-app notification. The "Last updated" date at the top indicates when the policy was last revised.

Continued use of SafeAlerts after policy changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy concerns or data requests:

• Privacy Officer: privacy@SafeAlerts.com.bd
• General Support: support@SafeAlerts.com.bd
• Phone: +880 1700-000000 (Mon–Fri, 9am–6pm BST)
• Chat: Use the chat widget on our website for immediate assistance

We will respond to privacy requests within 30 days.