This policy explains what data the Shushan Marketing app collects and how it is used. By using the app you agree to the terms described here.

1. Data We Collect

• Email address and password — only when you create an account or sign in. Passwords are stored hashed (PBKDF2-SHA-256 with a random salt) and never in plain text.
• Login session — a random token stored only as a SHA-256 fingerprint in the database, valid for 30 days. The token is kept on your device (localStorage) to preserve your login state.
• AI chat messages — messages you send to the assistant are processed in memory only and are not stored on your device's disk.
• Speech recognition — when you use the microphone button in the chat.

2. Speech Recognition

When you tap the microphone button, the app uses the speech recognition service built into Android (Google Speech Recognition). Audio is sent to this service to be converted to text, then the text is returned to the app for use in the chat. The app does not record, store, or send audio to any Shushan server.

Google's privacy policy applies to this processing: https://policies.google.com/privacy

3. Third-Party Services

• Cloudflare Workers — hosts the app's server, APIs, and AI assistant. Chat messages are sent to this server for processing. Your data is stored in a Cloudflare D1 database.
• Google Speech Recognition — for converting speech to text (see section 2).
• Cloudflare Access — protects admin pages only (does not affect regular user data).

4. Your Rights

• You can delete your account at any time from inside the app (My Account → Delete Account).
• Upon deletion: your email, hashed password, and all active sessions are removed immediately from our database.
• For any data request, contact us at the address below.

5. Data Protection

All server communications are encrypted (HTTPS). We do not share your data with any third party for advertising purposes. The app does not collect your location, contacts, or any other data not listed above.

6. Contact Us

For any questions about this policy or to request data deletion:
[email protected]