Privacy Policy

GEMINV (“we,” “our,” or “us”) is a private gemstone inventory and sales management platform built and operated by Aabidh Faizan. Our contact email is geminv123@gmail.com.

We collect only the data necessary to provide our service:

• Account data: Your name and email address, provided either directly or via Google OAuth when you sign in.
• Profile picture: Your Google profile image if you sign in with Google (stored only as a URL reference).
• Inventory data: Gemstone details, photos, documents, buyer records, and financial records that you enter into the platform.
• Usage data: Session tokens, IP addresses (for rate limiting), and server-side logs. We do not use analytics trackers or ad networks.
• Payment data: Subscriptions are paid by direct bank transfer. We store the payment receipt you upload (image or PDF) and its details for verification and record-keeping. We never see or store card numbers or online banking credentials.

• To provide, maintain, and secure your account and inventory.
• To authenticate your identity and manage access permissions.
• To verify bank-transfer payments from the receipts you upload.
• To send transactional communications (invitations, access grants).
• To comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

• Google OAuth: Used for sign-in. Governed by Google’s Privacy Policy.
• Railway: Our hosting provider. Your data is stored in their managed PostgreSQL database and object storage.

Your account data and inventory data are retained for as long as your subscription is active. If your subscription lapses, your data is retained for a 30-day grace period before deletion. You may request deletion at any time by contacting us at geminv123@gmail.com.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict our processing of your personal data.
• Receive your data in a portable format.

To exercise any of these rights, please email geminv123@gmail.com.

We use a single session cookie to keep you signed in. We do not use third-party tracking cookies, advertising cookies, or analytics pixels.

All data is transmitted over HTTPS. Passwords are hashed with bcrypt. Session tokens are signed with a strong secret and tied to a single device. Access to data is enforced server-side by role-based permissions on every request. Self-signup accounts must verify their email at signup and confirm a fresh emailed code when signing in from a new device; these codes are hashed, short-lived, and never stored in plain text.

We may update this Privacy Policy from time to time. Material changes will be communicated via the email address associated with your account. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Email us at geminv123@gmail.com or call +94 774 661 377.