How we protect your account

Sign-in is handled by our managed authentication provider. You can register with email and password or with Google.

Sessions are scoped to your device. Signing out clears your session and protected data is no longer accessible from that device.

Each customer can only view and create their own orders. Order status and payment status are administrator-controlled — only our team can mark an order as Processing, Completed, or verify a payment.

These rules are enforced on the server with row-level security, not in the browser.

Receipts you upload are stored in a private bucket. Only you and authorised BIGPOSH TECH HUB administrators can access your files.

Uploads are validated on the server: we accept only JPG, PNG, WebP, GIF, and PDF files up to 10 MB, and we rename files on upload so that the original filename cannot be used to disguise a file type.

We store the information you provide to fulfil your order: your name, email, phone number, the service you requested, your order notes, and the payment receipts you upload.

We do not collect or store your bank credentials, card numbers, or any payment-method secrets — payments are made by bank transfer to the account shown on your order page.

You can update your profile from your dashboard. To request deletion of your account or order history, contact us using the details below and we will respond as soon as possible.

For security questions or to report a vulnerability, contact us on WhatsApp at 09021316028 or via the contact page. Please include enough detail for us to reproduce the issue.