Privacy Policy

Syrian American Pros Hub (“we”, “us”) operates saproshub.com, a community directory for discovering and supporting Syrian American businesses across the United States. This policy explains what information we collect, why, and the choices you have. The short version: we collect what the platform needs to work, we don't sell your personal information, and you can delete your account yourself at any time.

Information you give us

Account details. When you create an account we store your name, email address and a public handle. You can optionally add a profile photo, a short bio and your city. If you sign in with Google, Google shares your name, email address and profile photo with us; we never see your Google password.

Content you contribute.Reviews and ratings, photos, posts, comments, lists, event RSVPs, group memberships and business submissions are stored so the platform can display them. Your reviews, posts, comments, public lists and profile (name, handle, photo, bio) are visible to other visitors — please don't put anything in them you want kept private.

Business information. Details submitted about a business (address, phone, website, hours, photos) are directory content about that business, intended to be public.

Information collected automatically

We keep the technical minimum: your IP address is used transiently for abuse prevention and rate limiting, and your browser's user-agent string is stored with each sign-in session so you can recognise your own devices on the account page. Listing statistics (profile views, appearances in search, clicks on call/directions/ website buttons) are counted in aggregate and are not tied to your identity or profile.

If you choose “Use my location” while adding a business, your browser asks for permission first, and the coordinates are used once to look up the address via OpenStreetMap's geocoding service. We do not store your location.

Cookies

We use essential cookies only: a session cookie that keeps you signed in, and short-lived cookies that secure the Google sign-in handshake. We do not use advertising or cross-site tracking cookies, which is why there is no cookie banner.

How we use your information

To operate the platform: showing your contributions, keeping your account secure, notifying you inside the app, preventing spam and abuse, and sending transactional email (verifying your address and resetting your password). We don't send marketing email, and we do not sell or rent personal information to anyone.

Services we rely on

Like most modern sites, we run on established infrastructure providers, which process data on our behalf: netcup GmbH (hosting, database and image storage, Germany), Cloudflare (content delivery and security), and Resend (delivering the emails described above). Spam protection is provided by Google reCAPTCHA, which evaluates interactions on our signup and submission forms; use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service. Maps and address lookups use OpenStreetMap-based services. If you use Google sign-in or a business owner imports listing details from Google, those interactions involve Google as described above.

Security

Passwords are stored only as salted, memory-hard hashes — never in plain text. Sign-in sessions, password-reset links and verification links are stored hashed, so a database leak alone cannot be used to impersonate you. All traffic is encrypted with HTTPS, and staff accounts are required to use two-factor authentication.

Retention and deleting your data

We keep your information while your account exists. You can delete your account yourself from Settings, which permanently removes your profile and personal contributions (reviews, comments, likes, lists, group activity, uploaded photos). Business listings remain in the directory because they describe a business rather than a person, but they are unlinked from your account. We may retain minimal records where required for security, moderation or legal purposes.

Children

The platform is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

Changes and contact

If we change this policy we will update this page and its effective date. Questions or requests about your data can be sent to contact@saproshub.com.