Privacy Policy

This Policy covers Bsouria’s website and Android app: articles, opportunities, business and Syrian website directories, accounts, messages, notifications, contact and contribution forms. Operator responsible for processing: Ander. Contact address: Arjan, Dubai, United Arab Emirates. Email: doughouzander@gmail.com.

The website and app are interfaces to the same service. Some forms open as secure pages inside the app. External linked websites are separate services.

The app provides a streamlined experience for selected Bsouria website services; it does not necessarily include every website tool or service. Data provisions apply to the feature you actually use. Some forms and pages open inside the app, and data collected through these pages is part of app use. Additional website services depend on the page you choose to open.

Account/profile: name, email, account ID, a password stored as a hash, and details you enter such as photo, phone, WhatsApp and professional information. Registration age information is used to check eligibility.

Publishing/contact: listing content, selected country, region, city and address, contact details, images, CVs/documents uploaded in the relevant form, messages, reports, support and contribution requests. Do not send sensitive documents unless requested for a clear purpose.

Operations/security: IP, browser/app and operating system, requested pages/times, session identifiers, language, time zone, sign-in and abuse events. Approximate country/region and network information may be inferred from IP; this is not phone GPS location.

We use data for accounts and publishing, requests/messages, service communications, content/report review, account security, fraud prevention and reliability. We do not sell your personal data for money.

Where required by law, the bases are providing your requested service, proportionate legitimate interests in security/administration, legal obligations, or consent where needed, such as optional analytics. Withdrawal does not undo earlier lawful processing.

Approved public content is available to visitors. Published contact details, addresses and images may be viewed and indexed by search engines. Review visibility choices before submitting; do not publish others’ personal data without a right to do so.

A CV uploaded from a business form is saved in your account and attached to the listing. Visitors can open it even if your profile link is private. A new upload replaces the previous account CV and may update other listings that reference it. Attachment/sharing determines access; storage alone does not make it public.

The current Android app requests Internet/network-state access, not GPS, contacts, SMS, microphone or broad storage permission. The camera icon opens the system file picker; access is limited to the file you choose to upload.

The app stores language/theme choices, a sign-in session and cached public content/images for speed or offline reading. Uninstalling removes local app data, not your account or server data.

Messages are processed for delivery; account notifications appear in the website/app. Email supports verification, recovery and request follow-up. Authorised staff may review message/report data for support, safety or legal needs. These communications are not end-to-end encrypted against operator access.

Session cookies/storage support secure sign-in, request-forgery protection and language/theme choices. Website pages opened inside the app may include optional analytics according to consent settings and your choice. The current native app has no added advertising/analytics SDK; server and embedded-page processing still apply.

Accept or reject optional analytics using this page’s controls or the cookie notice when shown. A received Global Privacy Control signal prevents website-managed optional analytics from loading. Clearing session cookies may sign you out or reset preferences.

Website pages use Google measurement tools when optional analytics are allowed. Google may receive technical data such as IP, browser details, page requests and usage events according to the tool configuration. Rejecting optional analytics does not block basic browsing.

Necessary data is processed by hosting, storage, email/security providers and authorised staff. ipapi.is, ipwho.is and country.is may assess the network or estimate a broad location from IP. Providers may process data outside your country; infrastructure is not limited to the UAE or Syria.

With Google/Facebook sign-in we receive authorised provider account data, such as ID, name, email/photo, not the provider password. Opening Google Maps, WhatsApp or a directory site, or loading an externally hosted image, may disclose IP/request data to that provider under its policy.

Your chosen recipient/publisher may process your data independently. Limited information may also be disclosed for valid legal obligations or protecting rights/safety, proportionate to the purpose.

We use HTTPS, password hashing, request validation, access controls and allowed-file checks. Uploaded CVs use protected storage and routes checking sharing permissions. No measure removes every risk; protect sign-in details and never send passwords or recovery codes to support.

Account data/content remains while the account exists or the requested service needs it. Support requests/reports remain as needed to handle them; security records as needed for investigation, protection and legal duties. Duration depends on category, purpose and applicable obligations.

Delete through Account → Delete account. Confirmation requires email/password; opening the page alone deletes nothing. The process removes the account, profile, content, messages, notifications and associated files handled by the deletion system. If access is unavailable, email doughouzander@gmail.com from the account address or use Contact. Proportionate ownership verification may be required; never send a password.

Copies may remain in hosting logs/backups until their replacement cycle, or limited data where legally necessary. Deletion cannot recall copies independently held by recipients/search engines. Contact us about retention applicable to your request.

Edit your details/visibility in Account. Depending on applicable law, rights may include access, correction, deletion, a data copy, restriction/objection, withdrawal of optional consent and complaint to the competent data authority. Send the request and account email to doughouzander@gmail.com. We respond within applicable legal deadlines and explain lawful limitations.

The minimum account age is 16, subject to legal capacity in your country. The service is not directed to younger children. Contact us about children’s data submitted contrary to this rule so we can investigate and act appropriately.

We process necessary report information, such as reporter identity, reply details, content link, explanation and administrative actions, to investigate concerns, protect people and handle appeals. Reporting is not public posting; administrative access does not imply absolute secrecy against a legal duty. Do not send CSAM; provide a link or identifier only.

If we learn of data from an ineligible child account, we take steps to restrict the account and handle or delete the data under applicable law, except necessary evidence for protecting people or meeting legal obligations. A guardian can contact doughouzander@gmail.com; we may request proportionate verification of authority without unnecessary documents.

We also store the accepted Terms version, acceptance time and language, and your blocked-account list to apply your content-viewing and messaging preferences. These records and the block list are not shown publicly.

Reports are not automatically sent to authorities. We assess an official request’s validity, scope and jurisdiction and disclose necessary data where legally required or where a lawful basis permits prevention of serious harm. This may include targeted evidence preservation and legally required reporting of child exploitation. We avoid unrelated disclosure and may be unable to notify a person where law or others’ safety prevents it.

Revision/date appear above. We update this Policy with service/processing changes, give appropriate notice of material changes and seek new consent when legally required. One privacy contact serves the website/app: doughouzander@gmail.com — Arjan, Dubai, United Arab Emirates.