Draft — not yet in force
This policy has not been reviewed by legal counsel.
We wrote this draft ourselves so the structure is ready for a lawyer to work on. It is not legal advice, it is not binding on you or on us, and the wording will change once a Bangladeshi lawyer has reviewed it. Until then, if you need to know exactly where you stand, ask us and we will tell you straight.
Effective date: to be set when this policy is approved. This draft is not in force.
This explains what we know about you, why we know it, and what we do with it. If a sentence here reads as vague, treat that as a bug — tell us and we will make it specific.
Account details: your name, business name, email address and phone number, including your WhatsApp number if you give us one, because a lot of our support happens there.
Billing records: what you bought, when, for how much, and whether the payment went through. These are our accounts, so we have to keep them.
Technical data: logs from the web servers and the control panel. They record IP addresses, timestamps, the pages requested and any error messages. This is how we investigate an outage or a break-in attempt.
Whatever you send us in a support conversation, which sometimes includes screenshots, error output or a config file you pasted in.
To deliver what you paid for: create the account, run the servers, register the domain, send the invoice.
To reach you when something needs your attention — a renewal, a failed payment, planned maintenance, or an urgent security issue.
To keep the platform safe: rate limits, abuse investigation, and working out which account a compromised script belongs to.
To meet accounting, tax and other legal obligations in Bangladesh.
We do not sell your data. We do not rent it, trade it, or hand it to advertisers.
We do not store card numbers, bKash or Nagad PINs, or one-time passwords. When you pay, the payment gateway runs the transaction on its own systems and tells us only whether it succeeded, along with a reference and, for cards, the last few digits where the gateway provides them.
That means a breach of our systems could not expose your payment credentials, because they were never on our systems in the first place.
The gateway handles that data under its own privacy terms, which apply to the payment itself.
This site sets a cookie to remember whether you chose English or Bangla, so a later visit does not drop you back into the wrong language. It is called NEXT_LOCALE and it contains nothing but the language code.
When you sign in to the dashboard or the hosting control panel, those systems set session cookies that keep you logged in. Sign-in does not work without them.
We do not run advertising cookies or cross-site tracking on this site.
Our infrastructure provider, which operates the data centre and the physical servers your site runs on. Our platform runs from Singapore.
Our domain registrar, for registering, renewing and transferring names. Registering a domain means giving the registry the contact details it requires, and depending on the extension some of those details may appear in public WHOIS records.
Our payment gateway, which processes payments and holds the payment data described above.
Each of them receives only what it needs for its part of the job. We will name these providers individually here once this policy is finalised with counsel.
Billing records: for as long as accounting and tax law in Bangladesh requires us to.
Account details: while your account is open, plus a short grace period afterwards so a cancellation can be reversed.
Server logs: a rolling window — long enough to investigate an incident, not forever. The exact retention periods are [to be confirmed with counsel] and will be listed here.
Support conversations: kept while they are still useful context for your account, then cleared.
Ask what we hold about you and we will tell you. Ask us to correct something wrong and we will fix it. Ask us to delete your account data and we will, apart from records we are legally required to keep — billing history, mostly.
You can opt out of marketing messages at any time. You cannot opt out of service messages such as renewal notices, invoices and security alerts, because those are part of running your account safely.
Bangladesh's data protection framework is still developing. Where a law gives you a stronger right than this policy describes, the law applies — we are not trying to sign anything away.
Access to customer data is limited to the people who need it for support and operations work. Traffic to this site, the dashboard and the control panel is encrypted.
If a breach ever affects your data, we will tell you what happened, what was exposed and what we did about it — promptly, and in plain language rather than a paragraph designed to be skipped.
We will update this page as the service changes. A material change — new categories of data, a new kind of provider handling it — comes with an email, not a silent edit.
The date at the top always shows which version is in force.
For any question about your data, or to make one of the requests above, use the support channels on our support page. Bangla or English, whichever you prefer.
A postal address for formal privacy requests will be added here before this policy takes effect.