Legal Compliance

Privacy Policy

A direct, simple breakdown of how your personal information and account data are protected on HamroEstate.

1. Information We Collect

We collect basic account information necessary to keep your account operational and secure. This includes your name, verified email address, and account passwords stored securely via salted cryptographic hashes. For users listing properties, we store the location, photos, descriptions, and contact information you explicitly provide.

2. Authentication & Session Cookies

We use secure JSON Web Tokens (JWT) and cookies to track session state, handle user authentication, and prevent cross-site request forgery attacks. These tokens handle automatic refresh rotation and are strictly used to keep you securely logged into your profile.

3. System Performance & Security Logs

To defend the network infrastructure from automated script attacks, brute-force hacking, and malicious traffic surges, we monitor network access logs. This processing includes analyzing incoming IP addresses for sliding-window rate limiting to ensure fair platform resource allocation.

4. Third-Party Services

Our data is stored using secure cloud database services (MongoDB Atlas) and caching layers (Upstash Redis). We utilize transactional email dispatch networks (Resend API) to send password reset links and account verification verification payloads. Your private data is never sold, traded, or distributed to advertisement brokers.

5. Your Rights Over Data

You retain ownership of your listings. You can update, modify, archive, or permanently delete your account data at any point directly from your profile dashboard layout.

Have questions about how your data is handled? Contact support