Data Policy

1. Scope & principles

We follow privacy-by-design and security-by-default principles. We aim to comply with applicable requirements in Bangladesh and align with internationally recognized privacy practices (transparency, minimization, and purpose limitation).

2. Data categories

• Identity & account data: email address, display name, and optional profile information you choose to provide.
• Usage data: feature interactions (e.g. chat usage, navigation), approximate timestamps, and diagnostic signals for reliability.
• User content: messages, uploads (such as PDFs you submit), and feedback you voluntarily send.
• Device & network data: IP address (approximate), user-agent, and security logs used to prevent abuse and protect accounts.

3. Processing purposes

• Service delivery: authentication, account management, feature access, and core functionality.
• Reliability & security: monitoring, abuse prevention, rate limiting, fraud detection, and incident response.
• Support: responding to questions and resolving technical issues.
• Product improvement: performance analysis and quality improvements. Where we use user content for model improvement, we do so only with explicit opt-in permission as described in our Privacy Policy.
• Legal obligations: compliance, responding to lawful requests, and enforcing our Terms.

4. Legal bases

Depending on the context, we process data to provide the service (contract), to secure and improve the service (legitimate interests), and with your consent where required (for example, optional chat data use for model improvement).

5. Storage & access

Access to personal data is limited to authorized personnel and service providers who need it to operate the platform. We use role-based access controls where feasible and keep audit and security logs.

6. Sharing

We do not sell your personal data. We may share data with trusted infrastructure and service providers who process it on our instructions (e.g. hosting, authentication, email delivery), or when required by law.

7. Retention

We retain data only as long as needed for the purposes above, unless a longer period is required for legal, dispute, or security reasons.

8. Security

We apply appropriate technical and organizational measures to protect data. This includes encryption in transit where available, secure credential handling, and security monitoring. No method of transmission over the internet is 100% secure; we work to reduce risk in line with industry practice.

9. Your rights & controls

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. You may also be able to control optional features (such as opt-in chat data use for model improvement).

10. Contact

Questions about this Data Policy: shikkhabondhuai.tech@gmail.com · General: shikkhabondhuai.tech@gmail.com