This Privacy Policy explains how the Soumokil Family Website ("we," "us," or "our") collects, uses, and protects your information. This site is a private, restricted platform built exclusively for known family members.
We use Vercel for web hosting and Convex as our database management platform.
1. Information We Collect and Receive
To log in securely, our site integrates with third-party identity providers via OAuth protocols and email-based sign-in. When you authenticate, we may collect:
- OAuth profile data: Your name, email address, and profile picture URL as provided by your chosen OAuth service (e.g., Google or GitHub). We request only basic, non-sensitive profile scopes.
- Email sign-in data: Your email address and account credentials or magic-link tokens when you sign in with email.
- User content: Photos, text posts, comments, or files that you explicitly upload to the platform.
- Technical logs: Basic network metadata (such as IP addresses and device types) processed automatically by our hosting provider, Vercel, to ensure site security and performance.
2. How We Use Your Information
We strictly limit the use of any data fetched through OAuth, email sign-in, or uploaded by users. Your data is used exclusively to:
- Verify your identity against our list of approved family members.
- Populate your local user profile (e.g., displaying your name and profile picture to other logged-in family members).
- Maintain, operate, and secure the website infrastructure.
3. Data Storage and Third-Party Subprocessors
We do not sell, rent, or trade your data. Your information is never shared with advertisers or unrelated third parties. To run the platform, we securely pass data to the following trusted subprocessors:
- Vercel Inc.: Renders the front-end application and manages edge hosting.
- Convex Inc.: Stores and secures application state, user records, and uploaded content.
4. Limited Use Compliance (OAuth Providers)
Our application's use and transfer of information received from OAuth API tools will strictly adhere to each provider's developer policies (such as the Google API Services User Data Policy).
- We do not use your OAuth data for any purposes other than granting access to this specific family portal.
- No user data collected via OAuth is transferred, exposed, or sold to external platforms or tools.
5. Data Security and Retention
Security: Database traffic is encrypted in transit using TLS, and user content is encrypted at rest within Convex. Access is restricted to approved family members.
Retention: We hold your information as long as the family portal remains active, or until you request account deletion.
6. Your Rights and Data Erasure
You have full access to your data. You may request deletion of your account, profile data, and any content you have uploaded at any time. To request data erasure, contact the site administrator at soumokil.site@gmail.com.
7. Contact Information
For questions regarding this policy or to request account deletion, contact the site administrator at soumokil.site@gmail.com. You can also return to the website homepage.