Privacy Policy

1. Information We Collect

A. Information users provide

We may collect information you give us directly, including:

• full name;
• email address;
• WhatsApp or telephone number;
• account and profile information;
• destination interests;
• relocation goals, circumstances, preferences, and consultation intake answers;
• messages sent through the platform;
• consultant notes, recommendations, and service-request information;
• information submitted when contacting support;
• profile photographs voluntarily uploaded by consultants or users.

Please do not submit highly sensitive information unless it is reasonably necessary for the service you are requesting.

B. Account and authentication information

To operate accounts and secure access, we may process:

• Supabase authentication identifiers;
• email OTP or magic-link activity;
• role and access permissions;
• account creation and sign-in timestamps;
• security and session-related information.

Public self-signup is not offered. A client account may be provisioned as part of the consultation booking process, but dashboard access requires proof of control of the submitted email address.

C. Booking and transaction information

When a consultation is booked or paid for, we may process:

• selected country, consultant, date, and time;
• consultation status;
• quoted and paid amounts;
• payment status;
• Stripe transaction identifiers;
• cancellation, authorization, capture, and refund records.

MakeHijrah does not directly store complete payment-card numbers. Payments are processed by Stripe under Stripe's own privacy and security practices.

D. Google Calendar information

Consultants may voluntarily connect Google Calendar. Where a consultant does so, the platform may access only the Google Calendar information needed to:

• check consultant availability through free/busy information;
• avoid scheduling conflicts;
• create and manage consultation calendar events;
• generate Google Meet links;
• maintain the consultant-facing booking workflow.

In connection with that integration:

• Google Calendar access is for consultants, not clients;
• clients are not added as Google Calendar attendees by the platform;
• Google OAuth refresh tokens are stored in encrypted form;
• Google access tokens are created server-side when required;
• Google user data is not sold;
• Google user data is not used for advertising;
• Google user data is not used to train generalized artificial-intelligence or machine-learning models;
• Google user data is not transferred to data brokers or information resellers.

MakeHijrah's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

E. Technical information

The platform and its service providers may automatically collect:

• IP address;
• browser and device type;
• operating system;
• requested pages and timestamps;
• application errors;
• security logs;
• diagnostic and performance information.

This information supports security, reliability, and troubleshooting.

2. How We Use Information

Information may be used to:

• create and administer accounts;
• provide public consultation booking;
• validate availability and prevent duplicate bookings;
• authorize, capture, cancel, and refund payments;
• connect clients with consultants;
• create consultation appointments and Meet links;
• provide dashboards, messages, notes, recommendations, giveaways, and service requests;
• send transactional and service-related emails;
• provide customer support;
• maintain security and prevent fraud, abuse, and unauthorized access;
• troubleshoot, monitor, and improve platform reliability;
• enforce agreements;
• comply with legal obligations;
• protect MakeHijrah, users, consultants, and others.

Google user data is used only to provide or improve the consultant-facing Calendar functionality requested by the consultant.

3. How Information May Be Shared

Information may be shared only as reasonably necessary with:

• the assigned consultant;
• authorized MakeHijrah administrators and personnel;
• Supabase for database, authentication, and storage services;
• Stripe for payment processing;
• Google for Calendar, OAuth, and Meet functionality;
• Railway and related infrastructure providers for backend hosting;
• Redis infrastructure used for temporary booking capabilities, caching, job coordination, and time-limited operational data;
• transactional email providers;
• professional advisers where reasonably necessary;
• government authorities or other parties where required by law or necessary to protect legal rights, safety, or platform integrity;
• a successor in connection with a merger, acquisition, restructuring, asset transfer, or similar business transaction, subject to applicable law.

In addition:

• MakeHijrah does not sell personal information;
• MakeHijrah does not sell Google user data;
• MakeHijrah does not share personal information for cross-context behavioral advertising;
• service providers may process information only to perform services for MakeHijrah, subject to their agreements and applicable law.

4. Data Storage and Security

MakeHijrah uses reasonable administrative, technical, and organizational safeguards, including:

• role-based access controls;
• Supabase Row Level Security;
• server-side handling of privileged credentials;
• encrypted storage of Google OAuth refresh tokens;
• restricted access to payment and consultation-state mutations;
• secure transport where supported;
• logging and monitoring;
• separation of browser-public configuration from server secrets.

No system can guarantee absolute security, and we cannot promise that information will always remain secure.

5. Data Retention

Information is retained only for as long as reasonably necessary to:

• provide services;
• maintain booking, payment, accounting, and support records;
• resolve disputes;
• enforce agreements;
• prevent fraud;
• satisfy legal, tax, regulatory, and operational requirements.

Retention periods vary according to the information in question and the purpose for which it is held.

Encrypted Google credentials are retained while the consultant's Google connection remains active, or as otherwise necessary to provide the integration. When access is disconnected or no longer required, MakeHijrah will delete or render the stored credential unusable within a commercially reasonable period, subject to security backups and legal obligations.

Temporary Redis records may expire automatically according to their assigned time-to-live.

6. User Choices and Rights

You may contact info@makehijrah.com to request, as applicable:

• access to personal information;
• correction of inaccurate information;
• deletion of personal information;
• restriction or objection to certain processing;
• a copy of information;
• withdrawal of consent where processing relies on consent;
• account closure.

MakeHijrah may need to verify identity before acting on a request, and may retain information where required by law or for legitimate security, transaction, dispute, or recordkeeping purposes.

Consultants who have connected Google Calendar may revoke access at any time through their Google Account security settings, and may contact MakeHijrah for assistance disconnecting the integration.

7. Communications

MakeHijrah may send transactional messages related to:

• authentication;
• bookings;
• payments;
• consultant acceptance or decline;
• appointment reminders;
• messages;
• recommendations;
• service requests;
• account security;
• support.

Transactional communications are necessary to operate the service and are not marketing messages.

8. Children

The platform is intended for adults who can enter legally binding agreements and is not directed to children under 18.

MakeHijrah does not knowingly collect personal information from children under 18. If you believe a child has submitted information, please contact info@makehijrah.com.

9. International Processing

MakeHijrah, its consultants, users, and service providers may be located in different countries. Information may therefore be processed outside your country, where privacy laws may differ from those where you live.

We take reasonable steps to protect information as described in this policy and as required by applicable law.

10. Third-Party Services and Links

Third-party services, websites, payment pages, Google services, and service-payment links operate under their own terms and privacy policies. MakeHijrah is not responsible for the privacy practices of third parties.

11. Changes to This Policy

This policy may be updated to reflect changes in our services, practices, technology, or legal requirements.

The updated effective date will be displayed at the top of this page. Material changes may also be communicated through the platform or by email when appropriate.

12. Contact

For privacy questions, requests, or complaints:

MakeHijrah — Email: info@makehijrah.com