Privacy Policy

This is a starting template — replace the bracketed sections with your own details before publishing, and have it reviewed against your local data-protection law.

What we collect

Account details you provide (name, email, business name), payment account identifiers you configure (not your provider password), and transaction data needed to verify payments (amount, sender number, reference, timestamps).

What we never collect

• Your bKash/Nagad/Rocket/Upay PIN or password
• One-time passcodes (OTP)
• The full text of SMS or notifications read by the companion app — only the amount, reference and sender number are extracted; the original message is discarded

How we use it

Solely to verify payments, detect duplicates and mismatches, notify you of results, and maintain an audit trail for security and dispute resolution.

Retention

Transaction records are kept for a limited period (configurable by the account owner) and older records are anonymized. Screenshots submitted for manual review are deleted after a set retention period. See the admin settings for the exact periods in effect on this installation.

Your rights

You can request a copy of your data or ask for your account to be closed at any time by contacting us.