Privacy policy

We collect only what the platform needs to connect Syrian professionals with organizations working on rebuilding Syria.

This is the part most people care about, so it is stated precisely rather than generally.

Profile data is held in a Postgres database hosted by Supabase in the European Union (Frankfurt, Germany). Uploaded files are held in Supabase storage in the same region. The application itself runs on Vercel. These providers process data on our behalf and are not permitted to use it for their own purposes.

If you are reading this from outside the European Union, your profile data is transferred to and stored there. Email is the exception: records of the messages we send you are held in the United States, which the Resend entry below explains.

To operate the directory, to let approved organizations find and contact professionals, to review submissions before they are published, and to reply to messages you send us.

We do not sell your data. We do not share it with advertisers. We do not use it to train machine learning models.

You can subscribe from the footer of any page, or by ticking the optional box when you create an account. That box is never ticked for you.

We store your email address, the language you were reading in, and where the subscription came from. Subscribing is separate from having an account: unsubscribing does not affect your profile, and deleting your account does not by itself remove you from the list.

Every newsletter carries an unsubscribe link, which is unique to you. We keep a record that you unsubscribed, so that you stay unsubscribed. You can subscribe again at any time.

We set cookies only to keep you signed in and to remember your session. There is no advertising on this site, and nothing here follows you to other sites, so there is nothing to opt out of.

We also count page views, using Vercel Web Analytics — the same company that runs the site. It sets no cookies and cannot recognise you on any other website. A view records the page, the page you came from, the country, region and city your connection appears to be in, and your browser, operating system and device type. A visit is identified by a value calculated from the request itself and discarded after 24 hours. We see totals, never individuals.

Two things are removed before a view is sent. The address of a member's profile page is reduced to a placeholder, so we can see how many profiles were read but not whose. And everything after the question mark in an address is dropped, which is why a link we emailed you — a sign-in link, an unsubscribe — never reaches Vercel. Pages inside your account, the administration screens, and the pages those emailed links open are not counted at all.

The contact form and the newsletter sign-up are open to anyone, so we count how many submissions come from an address in a given period to stop automated abuse. That count is keyed to your IP address and is deleted about a day after the period ends. It is not linked to your account or used for anything else.

Our hosting and database providers keep their own request logs, which include IP addresses, under their own retention periods.

We keep your profile for as long as your account exists. If you ask us to delete your account, we remove your profile, your uploaded files and your account record.

You can view and edit your profile from your account at any time. You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by writing to the address below. We will not charge you for this.

This platform is for working professionals and is not intended for anyone under 16. We do not knowingly collect data from children.

If this policy changes in a way that affects how your data is handled, we will update the date at the top and, where the change is significant, tell account holders directly.

For anything in this policy, including requests about your data, write to info@syriaexperts.com.