Privacy Policy

Who this policy covers

This policy applies to masjidops.io, the public marketing website, and to app.masjidops.io, the authenticated staff and administrator platform.

For masjid tenants, MasjidOps acts as a service provider that processes community and operational data on behalf of the masjid. The masjid remains responsible for what it collects from its own community.

Information we collect

We collect only what is needed to respond to inquiries and operate the platform.

• Demo request details you submit on the public site: organization name, contact name, email, phone, role, areas of interest, current tools, and launch timing.
• Lead source information such as the referring page, campaign parameters, and submission timestamp.
• Staff account information for app.masjidops.io, including name, email, organization membership, and role assignment.
• Operational records a masjid tenant chooses to store in the platform, such as requests, registrations, volunteer records, communications, and documents.
• Security and diagnostic logs, including audit entries for sensitive actions.

How we use information

• Respond to demo requests, prepare proposals, and schedule onboarding conversations.
• Provide, secure, support, and improve the platform for masjid tenants.
• Detect and prevent abuse, spam, and unauthorized access.
• Meet legal, tax, insurance, and record-keeping obligations.

AI processing and human review

Some platform features use AI assistance to draft communications, summarize records, and suggest next steps. AI output is reviewed by masjid staff before it is published or sent to a community member.

AI features do not make final decisions on sensitive matters such as financial aid, safeguarding, or personnel actions. Public-facing AI surfaces disclose that they are automated.

Sharing and service providers

We do not sell personal information. We share information only with service providers that support the platform, such as hosting, database, email, messaging, and payment providers, and only to the extent needed to deliver the service.

Payments and donations are generally routed to a masjid's existing payment provider. Those providers handle payment data under their own terms and privacy policies.

Data retention and deletion

Marketing lead records are retained while a sales conversation is active and for a reasonable follow-up period afterward.

Tenant operational data is retained according to the retention schedule agreed with the masjid, and is exported or deleted on tenant offboarding.

You may request access, correction, export, or deletion of your information by contacting us.

Security

The platform enforces authenticated access, tenant isolation at the database level, audit logging for sensitive actions, transport encryption, and hardened security response headers.

No system is perfectly secure. We maintain an incident response process and notify affected tenants of confirmed incidents that materially affect their data.

Children's information

Youth and education modules may hold information about minors that a masjid collects from parents or guardians. That information is entered and controlled by the masjid, which is responsible for obtaining parental consent.

Contact

Questions, access requests, or deletion requests can be sent to jamshed.qureshi@provetta.ai or 214-796-4773.