Privacy policy

When a company creates a Mishkat account, we handle its company name, email address, and authentication information. Passwords are managed by our authentication provider and are not visible to the Mishkat team.

We also handle the project information submitted by Madaris Ulema, including project descriptions and the registered phone number used for project notifications.

We use this information to provide the Mishkat project directory, authenticate company users, save project selections and expected completion dates, and send service notifications. Where enabled, a one-time password (OTP) or project notification may be delivered to a registered phone number through the WhatsApp Business Platform from Meta. We do not sell personal information or use it for unrelated advertising.

Mishkat uses Supabase for authentication and application data, and Meta's WhatsApp Business Platform for WhatsApp OTP and notification delivery when that channel is configured. These providers process information only to provide the services we request and under their own privacy terms.

You may ask us to correct or delete your Mishkat account information, or stop non-essential WhatsApp notifications, by contacting the Mishkat team at privacy@mishkat.app. We may retain limited records when required for security, legal, or operational purposes.

We may update this policy as Mishkat develops. The latest version will always be available on this page, with the effective date shown below.