Privacy Policy

This policy explains what personal information Bespo-Kode collects through this website and client portal, how it is used, and the choices you have.

Information we collect

• Account details: your name, email address and an encrypted (hashed) password.
• Business details you share with us: company name, contact details, project information and files.
• Billing records: invoices and payment status. Card, UPI and bank details are entered on Razorpay's secure checkout and never reach our servers.
• Security logs: sign-in times, IP addresses and key account actions, kept to protect your account.
• Preferences such as display theme and email notification settings.

How we use it

• To deliver our services, share project updates and files, and issue invoices and receipts.
• To send the emails you choose to receive, which you can switch off in portal settings (receipts are always sent).
• To keep the portal secure and to diagnose errors.
• To meet legal, tax and accounting obligations.

We do not sell your personal information or use it for third-party advertising.

Service providers

We use trusted providers who process data on our behalf, only as needed to run the service:

• Vercel (hosting) and Supabase (database)
• Cloudflare R2 (file storage)
• Resend (transactional email)
• Razorpay (payment processing)
• Sentry (error monitoring, configured not to collect personal data)

Cookies

The portal uses only essential cookies: one to keep you signed in and one to remember your light/dark display choice. We do not use advertising or tracking cookies.

Retention

We keep project and account information for as long as you are a client and as needed afterwards for legal and accounting purposes. Invoices and payment records are retained as required by tax law.

Your choices and rights

You can view and update your profile and notification settings in the portal at any time. To request a copy, correction or deletion of your personal information, contact us at our contact page. Some records (such as invoices) may need to be retained by law.

Security

Passwords are hashed, connections are encrypted (HTTPS), files are stored privately and shared only through short-lived links, and access is limited to your own company's data.

Contact

Privacy questions or requests: our contact page.