Privacy and data requests

Information draft — not legally approved

This describes currently implemented software behavior, not a final legal policy. The legal data-controller identity, retention periods, processors, lawful basis and jurisdiction need approval before launch.

Messages and consent

The contact form requests a name, email address, subject and message. Nothing is submitted without an independently selected, initially unchecked consent box. Messages are for replying to inquiries, not public publication. Delivery can be unavailable until mail service is configured.

Public evidence and GitHub

Project and article pages show public information only after publication and evidence checks. Public GitHub and third-party source links have their own policies. Private repositories and credentials are not intended for disclosure.

AI processing and providers

Administrators can configure local or external AI services for draft creation and review. If an external provider is enabled, task inputs may be sent to it under its configured processing terms. The final provider list and retention terms have not yet been approved. Do not submit passwords or confidential records through contact.

Notification consent and account controls

Sign-in uses essential session and security protections where required. Visiting this website or submitting the contact form does not subscribe you to marketing or notifications. Signed-in users of the mobile companion can independently opt in to account activity, editorial updates or product updates via email or push. All six choices default to off and may be revoked individually. A stored preference does not mean notification sending or delivery is operational.

Revoke consent, export data or delete an account

  1. Open the Waleed Tech Companion app, select Saved & profile and sign in to your own account.
  2. Under My profile choose Privacy, consent and my data to open Account privacy. Turn off a purpose/channel to revoke consent; the app waits for server confirmation before showing it as saved.
  3. You can explicitly view and copy your account JSON export, or request account deletion after re-entering your password and typing DELETE. The app requires server confirmation of token and consent revocation before reporting deletion.

These controls belong to the authenticated mobile account, not a public website subscription form. A valid sign-in is required. Never send account tokens or private exports via the public contact form. Controls may be unavailable while the app or backend is not configured or reachable.

Authenticated app accounts have separate account-data actions; identity must be verified before a sensitive request is executed. The public contact form cannot bypass authentication.

Retention, deletion and correction requests

Authenticated account export and password-confirmed account deletion are now implemented. Deletion anonymizes the account email, removes saved items and preferences, revokes tokens and cancels related pending AI diagnosis jobs. This does not necessarily remove non-identifying audit records or establish a legally approved retention schedule. Retention periods, controller identity and processors still require approval. Correction and assistance requests can use the contact form when mail is configured; submission does not prove fulfillment.

Third parties and availability

Hosting, mail, GitHub and configured AI providers may be involved depending on the feature used. Final provider identities and terms require legal review. When mail is unavailable, the site reports it unavailable rather than falsely confirming delivery.