Privacy Policy

1. Who We Are

SYED.DEV (operating as BrightVision USA) is a full-stack web development agency based in Pakistan, serving clients worldwide. We are the data controller for information collected through syeddevio.com.

Contact: hello@syeddevio.com

2. Data We Collect

We collect the following categories of personal data:

• →Contact information: name, email address, WhatsApp number when you submit a form
• →Account data: email, hashed password, OAuth provider ID when you create an account
• →Project enquiry data: project descriptions, budget, timeline preferences
• →Usage data: pages visited, time on site, browser type (via Vercel Analytics)
• →Communication data: messages sent through our client portal
• →Payment data: we do not store card details — payments are handled by third-party processors

3. How We Use Your Data

• →To respond to project enquiries and provide quotes
• →To deliver the services you have purchased or requested
• →To send transactional emails (enquiry confirmations, project updates)
• →To maintain and improve our website and services
• →To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Third-Party Services

We use the following third-party services that may process your data:

• →MongoDB Atlas — database hosting (servers in EU/US)
• →Cloudinary — image and video storage and delivery
• →Vercel — website hosting and analytics
• →Google OAuth — optional login via Google account
• →Resend — transactional email delivery

5. Cookies

We use the following cookies:

• →Session cookies — to keep you logged in during your visit
• →next-auth.session-token — authentication token (HttpOnly, Secure)
• →admin_token — admin panel authentication (HttpOnly, Secure)
• →Theme preference — stores your dark/light mode choice (localStorage)

We do not use advertising or tracking cookies. We do not use Google Analytics.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• →Right of access — request a copy of your personal data
• →Right to rectification — correct inaccurate data
• →Right to erasure — request deletion of your data
• →Right to restrict processing — limit how we use your data
• →Right to data portability — receive your data in a portable format
• →Right to object — object to processing based on legitimate interests

To exercise any of these rights, email us at hello@syeddevio.com. We will respond within 30 days.

7. Data Retention

We retain your data for the following periods:

• →Account data — until you delete your account or request deletion
• →Enquiry data — 3 years from submission date
• →Project data — 5 years from project completion
• →Analytics data — 12 months rolling

8. Security

We implement industry-standard security measures including HTTPS encryption, bcrypt password hashing, HttpOnly secure cookies, two-factor authentication for admin access, and regular security reviews.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or by posting a prominent notice on our website. The date at the top of this page reflects the most recent update.

10. Contact Us

For privacy-related questions or to exercise your rights: