Privacy, security, and how we handle your data.

Admin areas of UsmanJatoi.com are protected by email-based sign-in. Only accounts explicitly granted an admin role can access private dashboards, import tools, or submissions.

• Public pages are open to everyone; no account is required to read them.
• Admin sessions use short-lived tokens managed by our hosting platform.
• Role checks run server-side, not in the browser.

The site runs on modern serverless infrastructure. Application logic, media, and database services are provided through Lovable Cloud. This is a platform capability description — not an independent certification.

We aim to keep the personal data footprint small. The main data touchpoints are:

• Contact form submissions (name, email, optional phone, message).
• Basic analytics (page views, referrer, approximate location from IP).
• Third-party chat and video widgets when you interact with them.

Submitted information is used to respond to your inquiry, follow up on collaborations, and improve the site. We do not sell personal data. Marketing outreach is limited to conversations you started.

The site relies on a small set of third parties to operate. Each has their own privacy policy:

• Lovable Cloud — application hosting, database, and storage.
• Chatway — embedded chat widget.
• VideoAsk — embedded async video messaging.

We use a minimal set of cookies for session state and basic analytics. Third-party widgets may set their own cookies when loaded. You can clear cookies at any time via your browser settings.

Contact submissions are retained as long as they are useful for the ongoing conversation. If you would like your message or personal data removed, email us and we will delete it from our records.

If you believe you have found a security issue on UsmanJatoi.com, please report it privately before sharing publicly. We appreciate researchers who give us a chance to fix issues first.

• Email: security@usmanjatoi.com
• Please include reproduction steps and any relevant URLs.
• We aim to acknowledge reports within a few business days.

Security is a shared effort. The hosting platform maintains the underlying infrastructure, we maintain the application and content, and visitors are responsible for keeping their own accounts, devices, and credentials safe.