Privacy policy

About this prototype

PSCA Amanat is an independent demonstration proposed for Punjab Safe Cities Authority. It is not an officially authorized government service. This notice describes the current prototype and proposed principles; it is not a claim that the future service or its safeguards are operational.

Use fictional demonstration details

Lost and Found forms accept reports only from signed-in WordPress users. Use fictional details for this controlled demonstration. Do not enter complete identity-document numbers, banking information or passwords in report fields. Uploads are disabled. Public search, tracking, matching and handover remain unavailable.

How report information is stored

Report fields, private contact information, approximate locations, identifying details and review notes are stored in protected WordPress metadata attached to private report records. The report type is excluded from public REST endpoints, public search and feeds. Private details are not placed in public post content or uploads. Data is not encrypted by this application; authorized site/database administrators and trusted server code can access the database.

Access and review

Report access is restricted to the submitting WordPress user and administrators with the required management capability. Administrators can record Pending Review, Approved for future listing or Rejected and private review notes. Approval does not publish the report in this milestone. Matching, ownership verification and handover have not been implemented.

Temporary notices and retention

Validation feedback and confirmation notices use private, owner-bound WordPress transients that expire after 15 minutes. Submission attempts are limited per account. Reports remain stored until an authorized administrator removes them; automated retention, self-service deletion and privacy-request tools are not implemented. The project owner must define these processes before public use.

Website visits and hosting

Ordinary visits may be recorded by the hosting provider through technical server logs, such as IP addresses, requested pages and browser information. WordPress sign-in uses authentication cookies. Hosting retention, access practices and any service-provider policies must be confirmed by the project owner before public launch.

Principles for a future service

• Collect only information necessary for recovery and verification.
• Restrict access to identity documents and private contact details.
• Show limited information in public reports.
• Verify ownership before arranging a return.
• Define retention periods, deletion processes and incident response before launch.

Contact and help

A project support contact has not yet been designated. No official PSCA contact channel is provided for this independent prototype. This website is not monitored for complaints or emergency assistance.

Before a public launch

The project needs a confirmed operating organization, approved contact details, a tested security and privacy design, and a final privacy notice reflecting the systems actually implemented.