Privacy Policy

1. Who we are

BekarConnect, the operator of BekarConnect, is responsible for the personal data described in this policy. In data protection terms we are the controller of that data.

This policy explains what we collect when you use BekarConnect at https://bekarconnect.com, why we collect it, who we share it with, and what you can do about it. It applies alongside our Terms & Conditions and Cookie Policy.

Questions, requests and complaints go to privacy@bekarconnect.com.

2. What we collect

Information you give us when you register

• Email and password, if you register with an email address. We never store your password itself — only a salted cryptographic hash of it, from which the password cannot be recovered.
• Phone number, if you sign in by one-time code. We store the number and a hash of each code issued, together with its expiry and the number of attempts made.
• Google account identifier and email address, if you sign in with Google. We receive these from Google; we never see your Google password.

Information you choose to publish

• Profile: your name, headline, biography, location, avatar image and skills.
• Posts and interactions: posts and their type, comments, likes, reposts, and any location label attached to a post.
• Opportunities: listings you publish, the skills attached to them, and applications you submit or receive.
• Teams and workspaces:teams you create or join, invitations, join requests, membership and roles, notes, polls and your votes in them, meetings, tasks, and files you upload (up to 20 MB each).
• Projects: projects, milestones, members, and the income and expense entries recorded against them. These entries are figures typed in by users; we do not process payments and these records reflect no actual movement of money.

Private communications

Direct messages and team chat are stored on our servers together with their participants and timestamps. They are not end-to-end encrypted. We do not read them routinely, but they are technically accessible to us, and we may access and disclose them in the narrow circumstances set out in section 5.

Location

Attaching a location to a post is optional and requires your browser’s permission. If you use it, your device’s coordinates are sent to the OpenStreetMap Nominatim service to be converted into a place name. We store only the resulting place name — for example “Dhaka, Bangladesh” — and never your precise coordinates. You can decline the permission or remove the label before posting.

Technical information

Our servers and hosting providers record standard operational data, including IP address, date and time of requests, pages and endpoints accessed, referring page, browser and device type, and error diagnostics. This is used to run, secure and debug the service.

Cookies

We set three cookies and no advertising or analytics cookies at all. Each is described in the Cookie Policy.

3. How we use your information

We use personal data to:

• create and administer your account and authenticate you;
• display your profile and content to other users as you have chosen;
• operate the features you use — feeds, messaging, teams, projects and opportunities;
• send service email, such as the welcome message when you register, and messages about security, changes to the service or these policies. We do not send marketing email;
• generate suggestions in the automated features described in section 6, where you use them;
• keep the Platform secure — detecting and investigating fraud, abuse, spam, scraping and unauthorised access;
• respond to your support requests and reports;
• diagnose faults and improve the service; and
• comply with law and respond to lawful requests.

We do not sell your personal data, and we do not share it with advertisers or data brokers.

4. Legal bases

Where data protection law requires us to identify a legal basis for processing, we rely on:

• Performance of a contract — to provide the Platform you asked us to provide, under our Terms.
• Legitimate interests — to secure the Platform, prevent fraud and abuse, debug faults and improve the service, balanced against your rights.
• Consent — for optional features you switch on, such as sharing your location. You can withdraw consent at any time.
• Legal obligation — to comply with law and respond to lawful requests.

5. Who we share it with

Other users

Your name, headline, biography, location, avatar, skills, posts, comments, likes, reposts and opportunity listings are visible to other users, and posts and profiles may be visible to anyone on the internet. Content you put in a team or a conversation is visible to its other members. Treat anything you publish as public and permanent. Do not post your national identity number, financial details, home address or other sensitive information.

Service providers

We use the following third parties to operate the Platform. Each processes data only as needed to provide its service to us.

Law enforcement and legal requests

We may access, preserve and disclose your information — including private messages — without notice to you, where we believe in good faith that it is necessary to comply with a law, court order or lawful request from a competent authority; to investigate a suspected breach of our Terms; to detect or prevent fraud or a security problem; or to protect the rights, property or safety of us, our users or the public. Where we are permitted to notify you and it is not prejudicial to do so, we will try to.

Business transfer

If the Platform is merged, acquired or its assets sold, your data may transfer to the acquirer, who would remain bound by this policy or give notice of any change.

6. Automated and AI processing

Some features send your text to Google’s Gemini service for processing and return a generated suggestion. This applies to idea validation, career and business guidance, proposal drafting, pricing suggestions, skill, team and opportunity matching, service suggestions, and automated flagging of content that may be fraudulent.

Your input leaves our servers and is processed by Google under Google’s own terms. Do not put confidential information, personal details of other people, or anything you would not want disclosed into these features.

We do not use automated decision-making that produces legal effects concerning you. Content flagged automatically as potentially fraudulent is reviewed by a person before any action is taken on an account.

7. How long we keep it

• Account and profile data — while your account is open.
• Posts, comments and other published content — until you delete it, or your account is deleted.
• Messages — retained for the other participants, who have their own copy of the conversation, even after you leave it.
• One-time codes — a few minutes, then expired and no longer usable.
• Server and security logs — a limited period for security and diagnostics.
• Deleted accounts — removed within about 30 days, except where we must keep something to comply with a legal obligation, resolve a dispute, respond to a preservation request, or enforce our Terms. Backups are overwritten on their normal rotation.

Where an account has been closed for fraud or abuse, we retain the minimum necessary to stop the same person re-registering and to answer any subsequent legal or law-enforcement request.

8. Security

We take reasonable technical and organisational measures to protect your data, including:

• passwords stored only as salted hashes, never in a readable form;
• encryption in transit over HTTPS, and an encrypted connection to our database;
• session tokens held in cookies that JavaScript cannot read, marked Secure and SameSite=Lax;
• role- and permission-based access controls on administrative functions; and
• account lockout after repeated failed sign-in attempts.

No system is completely secure. We cannot guarantee that your data will never be accessed, disclosed, altered or destroyed by a breach of our safeguards. You are responsible for choosing a strong password, keeping it and any one-time code confidential, and telling us promptly at support@bekarconnect.com if you suspect your account has been compromised.

9. Your rights and choices

You can, at any time:

• view and edit your profile in the Platform;
• delete your own posts, comments and uploaded files;
• close your account;
• decline or revoke the browser location permission; and
• control cookies in your browser, as described in the Cookie Policy.

Depending on where you live, you may also have rights to request access to the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, to receive a portable copy, and to withdraw consent. To exercise any of these, write to privacy@bekarconnect.com. We will respond within one month. We may need to verify your identity first, and some rights are qualified — for example we cannot erase a message from another participant’s copy of a conversation, or delete records we are legally required to keep.

If you are unhappy with our response, you may complain to the data protection authority in your country.

10. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact privacy@bekarconnect.com and we will delete the account and its data.

11. International transfers

We are based in Bangladesh, and the providers listed in section 5 operate globally. Your data may therefore be processed in countries whose data protection laws differ from those of your own. Where we transfer data internationally we rely on our providers’ contractual safeguards for such transfers.

12. Changes to this policy

We may update this policy. The current version is always published here with its effective date. Where a change is material we will take reasonable steps to notify you before it takes effect.

13. Contact us

BekarConnect
Dhaka, Bangladesh
Privacy: privacy@bekarconnect.com
General: support@bekarconnect.com