Privacy Policy

This Privacy Policy explains how KaamPoint ("we", "us") processes personal information of users in Pakistan. We are committed to handling your data responsibly and in line with applicable laws including the Prevention of Electronic Crimes Act (PECA), 2016, relevant provisions of the Electronic Transactions Ordinance, 2002, and emerging personal-data protection standards in Pakistan.

1. Data we collect

• Account data: name, email, mobile number, city, password (stored hashed), role (client/provider/admin).
• Profile data: photo, skills, portfolio, pricing, availability, business description.
• Verification data: CNIC images and documents (stored securely; not publicly accessible).
• Transaction data: jobs, bids, payments, invoices, subscription records.
• Communications: in-app messages, contact form submissions, support tickets.
• Technical data: IP address, browser type, device information, cookies/session identifiers, login timestamps.

2. How we use your data

• Create and manage your account; verify email and provider identity.
• Match clients with providers; display profiles, jobs, and reviews.
• Process payments, subscriptions, and dispute records.
• Send service notifications (email/SMS/in-app) you have opted into.
• Prevent fraud, enforce Terms, and comply with legal requests from Pakistani authorities when lawfully required.
• Improve Platform security and performance.

3. Legal basis & consent

We process data based on contractual necessity (providing the service), legitimate interests (security, analytics), and consent where required (e.g. marketing communications). You may withdraw consent for optional channels via notification preferences.

4. Sensitive & CNIC data

CNIC and verification documents are classified as sensitive personal data. They are:

• Stored in private, access-controlled storage — never in public URLs.
• Viewable only by authorised admins for verification purposes.
• Retained only as long as needed for verification, disputes, or legal obligations.

5. Sharing & disclosure

We do not sell your personal data. We may share information with:

• Other users — only what is needed for the marketplace (e.g. provider name, city, ratings).
• Service providers — hosting, email/SMS delivery, payment processors under confidentiality agreements.
• Authorities — when required by court order, PTA directions, FIA investigation, or other lawful Pakistani process.

6. Data retention

We retain account and transaction records while your account is active and for a reasonable period afterward for tax, dispute, and legal compliance. Contact messages and logs may be archived. You may request deletion subject to legal retention requirements.

7. Security measures

• HTTPS encryption in production; hashed passwords (Argon2id/bcrypt).
• CSRF protection, session hardening, and role-based access control.
• Private file serving for uploads; MIME validation on uploads.

No system is 100% secure. Report suspected breaches immediately via Contact.

8. Your rights

Subject to Pakistani law, you may:

• Access and update profile information in your dashboard.
• Request correction of inaccurate data.
• Request account deletion (we may retain minimal records where law requires).
• Opt out of non-essential marketing notifications.

9. Cookies & sessions

We use essential cookies/session storage for login, CSRF protection, and "Remember me". We do not use third-party advertising trackers on the core Platform.

10. Children

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

11. International transfers

Primary data is processed in Pakistan. If hosting infrastructure is located abroad, we ensure appropriate safeguards consistent with applicable law.

12. Changes & contact

We will post updates on this page. Material changes may be notified by email. For privacy enquiries contact us at Contact or the support email listed on our website.