Privacy Policy

Bitig (“we”, “platform”) respects user privacy. This document explains what data we collect, why we collect it, how we store it, and when we may share it.

1. Data We Collect

1.1 Account and identity data

• Email address
• Password (not stored directly by us, handled by auth provider)
• Profile data received during Google sign-in (e.g., name, avatar URL)
• Name and age entered during sign-up

1.2 Profile data

• Username and bio
• Avatar and banner images
• Platform role and reputation-related metrics

1.3 User-generated content

• Posts, comments, likes, polls and votes
• Follow relationships and notifications
• Report/moderation submissions
• Direct message data (content and metadata)

1.4 File and media data

• Profile and post images
• Audio track files uploaded via admin panel

1.5 Technical and security data

• Session/cookie data (for authentication)
• IP address and request metadata (for rate limiting and anti-abuse)
• Error and system logs

1.6 Analytics

We use Google Analytics, Microsoft Clarity, and Vercel Speed Insights. These tools may process aggregated usage statistics.

1.7 Mobile notifications

In mobile apps, push notification permission may be requested and a device push token may be obtained. (Persistent token storage may be limited/in development.)

2. What We Do Not Collect (in current scope)

• Direct end-user voice recording collection is not currently active in the main user flow.
• Payment card details are not directly processed by the platform.

3. Why We Use Data

• Account creation, login, and authentication
• Social features (posts, comments, messaging, etc.)
• Security, abuse prevention, and moderation
• Performance monitoring and product improvement
• Compliance with legal obligations

4. Data Sharing

We do not sell personal data. Data may be shared only with technical service providers to operate the service, with authorities when legally required, or with user consent.

5. Third-Party Services

• Supabase (auth, database, storage)
• Cloudflare R2 (media storage)
• Vercel (hosting/infrastructure)
• Google Analytics, Microsoft Clarity (analytics)
• Google OAuth (sign-in)
• Expo services (mobile notifications, where applicable)

6. Public Content Notice

Public posts and some profile elements on Bitig may be indexed and appear in search engines.

7. Data Retention

Data is retained while accounts are active and as required for legal/security purposes.

8. Security

We apply authentication, authorization, rate limiting, and other technical controls to protect data. However, no internet transmission is 100% secure.

9. Children

The platform is not intended for children under 13.

10. Your Rights

Depending on applicable law, you may have rights to access, correct, delete, or restrict processing of your data.

11. Account and personal data deletion

Bitig allows users to request deletion of their account and associated personal data. The same process applies on web and in the mobile app.

Steps:

1. Send an email to info@bitig.az from the email address registered on your Bitig account.
2. Use the subject line “Account deletion” or “Hesab silinməsi” and include your Bitig username (@username) in the message.
3. We process requests as soon as reasonably possible, typically within 30 calendar days. We may request additional verification in cases of suspected abuse.

Data that will be deleted or anonymised (where applicable):

• Account and profile (auth record, profile row)
• Public posts, comments, likes, follow relationships
• Direct messages (DMs) and in-app notifications
• Profile and post media (from our storage where applicable)

Limited retention may apply: minimal anonymised or restricted logs where required for legal obligations, dispute resolution, or security abuse prevention; payment records may be governed by our payment provider’s policies where purchases were made.

11.1 Deleting some data without closing your account

You can manage or request deletion of certain data without fully closing your account:

• You can delete your own posts and comments directly in the app using the relevant options on each item.
• For other categories of personal data, email info@bitig.az from your registered address with the subject “Data deletion request” or “Məlumat silinməsi”; include your Bitig @username and briefly list what you want removed. We typically process these within 30 calendar days.

For full account deletion, follow section 11 above (“Account and personal data deletion”).

12. Changes to this Policy

This Privacy Policy may be updated. The latest version will be published on this page with an updated date.