Privacy Policy

This explains what KenaBecha JU collects, why, and what you can do about it. It reflects what the software actually does, not a generic template.

What we collect

• Account details — name, university email, password (stored only as a hash, never in readable form), and optionally a photo, bio, phone and WhatsApp number.
• Student verification — student ID, registration number, hall, session, department and batch, used to confirm you are a JU student.
• Your activity — listings, shops, messages, ratings and reports you create.
• Listing views — so sellers can see how a listing is performing. Views are counted once per viewer per day. For signed-out visitors this uses a salted hash of IP address and browser, which cannot be reversed to identify a person or confirm that a given address viewed a given listing.
• Session data — login tokens, and the IP and browser attached to a session so you can spot unfamiliar logins.

What other people can see

Your name, photo, bio, department, hall, session, batch, ratings and active listings are visible on your public profile. Your phone and WhatsApp numbers are shown so buyers can contact you — leave them blank if you would rather only be reached through chat. Your password is never visible to anyone, including administrators.

Reviews you leave are public. Reports you file are visible only to administrators, not to the person you reported.

Why we use it

To run your account, show your listings to buyers, deliver messages and notifications, count views for sellers, keep the marketplace free of scams and abuse, and email you about your account (verification, password resets, and messages you missed while offline).

What we do not do

• We do not sell your data.
• We do not run advertising or third-party ad trackers.
• We do not process payments, so we never see your financial details.

Cookies

We use cookies only to keep you signed in and to remember your language and theme. There are no analytics or advertising cookies.

How long we keep it

Account data is kept while your account exists. Deleted listings and shops are retained in a deactivated state so that past conversations and ratings still make sense. Login sessions expire, and are revoked immediately when you log out.

Your choices

• Edit or remove your bio, photo, phone and WhatsApp number at any time from your profile.
• Delete your listings and shops at any time.
• Ask an administrator to remove your account.

Security

Passwords are hashed, sessions use HTTP-only cookies, and uploads are validated by inspecting the actual file contents rather than trusting the filename. No system is perfectly secure — use a password you do not reuse elsewhere.

Contact

For anything about your data, or to request deletion, use the Report button or contact an administrator. See also our Terms of Service.