Privacy Policy

Introduction

Baig Traders is a private business application used to prepare quotes and invoices for CCTV, security systems, TV installation, networking, and related work. This Privacy Policy explains what information the application stores, how optional Google Drive backup works, and how published Digital Business Cards are shared.

This policy is written for the Baig Traders application at baigtraders.space. It is not a policy for unrelated websites or third-party apps.

Information Stored

The owner account stores business profile information such as business name, tagline, phone, address, website, logo, tax and document settings, and login email.

The application also stores customer contact information entered by the owner, quote and invoice records, line items, service catalog data, payment-status information, and trash/archive records needed to keep document numbers stable.

If Digital Business Cards are used, the application stores card design choices, names, headlines, contact fields, and images the owner uploads for those cards.

The application does not sell customer lists and does not use stored business records for advertising.

Authentication

Sign-in is handled by Supabase Authentication. Only the authorized owner account can access the private application. Optional multi-factor authentication may be enabled by the owner.

Session cookies are used to keep the owner signed in on a trusted device. Sign-out and “sign out other devices” end those sessions.

Google Drive

Google Drive backup is optional. Connecting Drive is not required to use quotes, invoices, or Digital Business Cards.

When the owner chooses to connect Google Drive, Baig Traders requests the limited Google permission known as drive.file, plus the Google account email so the owner can see which account is connected. The application uses this permission only to create and update Baig Traders backup folders and PDF files that the owner authorizes, such as quotes and invoices under a Baig Traders folder.

Baig Traders does not request access to the owner’s entire Google Drive and does not read unrelated Drive files. Google user data obtained through Google APIs is used only to provide the requested Drive backup functionality. It is not used for advertising, is not sold, and is not shared with unrelated apps.

OAuth refresh tokens are stored server-side in encrypted form. They are not exposed to the public Digital Business Card pages or to anonymous visitors.

Supabase

The application uses Supabase for authentication, the business database, and file storage. Private files such as generated PDFs and unpublished card images are stored in private buckets. Access is limited by row-level security and owner-only policies.

Public Digital Cards

A Digital Business Card becomes publicly viewable only after the owner presses Publish. Anyone with the public link can see the name, company, images, and contact fields the owner chose to show on that card.

Unpublished, draft, and archived cards are not intended for public access. Hidden fields are not included on the public card or in the downloaded contact file.

The login email for the Baig Traders account is not shown on a public card unless the owner separately adds that address as a public card field.

Data Sharing

Private quotes, invoices, customers, payments, and settings are not shared with the public and are not exposed through Digital Business Card links.

The application uses hosting, database, and authentication providers to operate. Those providers process data only to run the service. Google Drive receives backup files only when the owner connects Drive and generates documents.

We do not sell personal information. We do not share Google user data with third parties except as needed to operate the Drive backup the owner requested or as required by law.

Security

The application uses encrypted connections in production, owner-only database policies, and encrypted storage of Drive tokens. These are reasonable safeguards. No internet service can promise absolute security.

Retention and Deletion

Draft quotes and invoices may be deleted by the owner. Numbered documents moved to Trash keep their reserved numbers. The owner may permanently delete trash items from Settings.

Published card information remains public until the owner unpublishes or deletes the card. Optional view, save-contact, and share counts are stored as simple totals without visitor names, emails, or device fingerprints.

Third-Party Services

The application may use Supabase (authentication, database, storage), Google (optional Drive backup and Google account email for the connected Drive account), and the hosting provider that serves baigtraders.space.

Those services have their own terms and privacy policies.

Changes

This policy may be updated as the application changes. The Last Updated date at the top of this page will change when it does.

Contact

Questions about this policy can be sent using the business phone, email, or address shown in Baig Traders Business Settings, or through a published Digital Business Card if the owner has provided public contact details.