Privacy Policy

Personal Information

When you interact with our platform, we may collect:

• Account Information: Name, email address, password (encrypted)
• Profile Data: Avatar, bio, social media links (optional)
• Contact Information: When you reach out via our contact form
• Newsletter Subscriptions: Email address for newsletter delivery
• Payment Information: Processed securely through Stripe (we don't store card details)

Automatically Collected Information

• Usage Data: Pages viewed, articles read, time spent on site
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies, preference cookies, analytics cookies
• Analytics: Google Analytics for traffic and engagement metrics

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve our platform
• Communication: To send newsletters, updates, and respond to inquiries
• Personalization: To recommend relevant content and customize your experience
• Security: To protect against fraud, abuse, and unauthorized access
• Analytics: To understand user behavior and improve our services
• Marketing: To inform you about new features and services (you can opt-out anytime)
• Legal Compliance: To comply with applicable laws and regulations

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted via HTTPS/TLS encryption
• Password Security: Passwords are hashed using bcrypt with salt
• Database Security: Row-level security policies on Supabase
• Authentication: Secure session management with NextAuth.js
• Access Control: Role-based permissions (Admin, Editor, User)
• Regular Audits: Periodic security assessments and updates
• Backup: Automated daily backups of all data

We use cookies and similar technologies to enhance your experience:

Essential Cookies

Required for authentication, session management, and core functionality. These cannot be disabled.

Analytics Cookies

Google Analytics tracks page views, user behavior, and traffic sources. You can opt-out via browser settings or extensions.

Advertising Cookies

Google AdSense may use cookies to display relevant ads. Premium members don't see ads.

We use trusted third-party services to operate our platform:

• Supabase: Database and authentication (data stored in secure AWS infrastructure)
• Vercel: Hosting and deployment (ISO 27001 certified)
• Stripe: Payment processing (PCI DSS compliant)
• Resend: Transactional email delivery
• Cloudinary: Image hosting and optimization
• Google AdSense: Advertising platform
• Google Analytics: Website analytics

Each service has its own privacy policy and data handling practices. We carefully vet all partners for security and compliance.

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-Out: Unsubscribe from newsletters and marketing emails
• Object: Object to processing for certain purposes
• Withdraw Consent: Revoke consent at any time

To exercise these rights, email us at privacy@amasstechhub.com

Children's Privacy

Our services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while account is active
• Inactive Accounts: Deleted after 2 years of inactivity (with notice)
• Newsletter Subscribers: Retained until you unsubscribe
• Analytics Data: Aggregated data retained for 26 months
• Legal Requirements: Data retained as required by law

International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by regulators
• Data processing agreements with all vendors
• Compliance with GDPR, CCPA, and other privacy laws

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via:

• Email notification to registered users
• Prominent notice on our website
• Updated "Last modified" date at the top of this page

Your continued use of our services after changes constitutes acceptance of the updated policy.