Privacy Policy

1. Introduction

SShubbd.info (“we,” “our,” “the Platform”) is committed to protecting your privacy. This policy explains what information we collect, why we collect it, how we use it, and your rights over your data. By creating an account or making a purchase, you consent to the practices described here.

This policy applies to all users of SShubbd.info, including visitors, registered users, buyers, and sellers. It is effective from 16 July 2026.

2. What Information We Collect

We collect only the information necessary to operate the marketplace and fulfill your orders:

• Account information: your name, email address, phone number (for bKash/Nagad payment verification), and profile avatar if you choose to upload one. Required for registration and order processing.
• Order and payment information: products purchased, amounts paid, payment method used (bKash, Nagad, Rocket), and transaction reference IDs. Note that your full mobile-wallet credentials (PIN, password) are handled entirely by the payment processor — SShubbd never receives or stores them.
• Device and usage data: pages visited, search queries, law sections viewed, download activity, browser type, device type, operating system, and IP address. Collected for security, analytics, and improving the platform.
• Law app data (if applicable): if you use the BD Law Assistant features, we log which acts and sections you view to improve search relevance and identify popular content.

3. How We Use Your Information

Your data is used exclusively for the following purposes:

• Processing and fulfilling your orders (generating download links, sending confirmations)
• Providing customer support and responding to your inquiries
• Maintaining your account and purchase history
• Improving the marketplace — search results, recommendations, and content organization
• Sending essential service communications (order confirmations, password resets, policy change notices)
• Fraud prevention, abuse detection, and platform security

We will never sell, rent, or share your personal information with third parties for their marketing purposes.

4. Legal Basis & Consent

By creating an account on SShubbd.info or completing a purchase, you explicitly consent to the collection and use of your information as described in this policy. We recommend including an explicit checkbox (“I agree to the Privacy Policy”) at signup and checkout to ensure clear consent, in line with Bangladeshi Digital Commerce guidelines and international best practices.

You may withdraw consent at any time by deleting your account or contacting us. However, withdrawing consent may affect our ability to provide certain services (e.g., order fulfillment).

5. Payment Data

We use third-party payment processors — bKash, Nagad, and Rocket — to handle all financial transactions. When you make a payment:

• Your payment credentials (mobile-wallet PIN, password, or card details) are entered directly on the payment provider's interface, not on SShubbd.
• SShubbd receives only a transaction ID, the amount paid, and a confirmation status from the payment provider. We do not store full payment numbers, PINs, or any sensitive financial credentials.
• Transaction identifiers are retained for accounting and legal compliance (see Section 7).

6. Data Storage & Security

Your data is stored on Supabase, a Postgres-based database platform with encryption at rest and in transit. Access to the database is restricted to authenticated server-side processes with role-based permissions. We follow these security practices:

• All connections to our servers are encrypted via HTTPS / TLS.
• Passwords are hashed and salted (handled by Supabase Auth).
• API keys and secrets are stored as environment variables, never in code.
• Regular backups are maintained for disaster recovery.

No security system is impenetrable. We take reasonable measures to protect your data, but we cannot guarantee absolute security. We will notify you of any data breach affecting your information within 72 hours as required by applicable law.

7. Data Retention

We retain your information only as long as necessary to provide our services and comply with legal obligations:

• Account data: retained for as long as your account is active. When you delete your account, personal data is removed within 48 hours.
• Transaction records: retained for 5 years as required by Bangladeshi tax and accounting regulations. Anonymized transaction data may be retained longer for analytical purposes.
• Usage analytics: retained in anonymized or aggregated form indefinitely for platform improvement.

8. Your Rights

You have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: request deletion of your account and associated data.
• Portability: request an export of your purchase history and account data.
• Withdraw consent: withdraw your consent to data processing at any time.

To exercise any of these rights, email privacy@sshubbd.info or use the Contact page. We will respond to your request within 14 days. There is no charge for exercising your rights.

9. Cookies & Analytics

We use essential cookies for authentication (keeping you logged in), security (CSRF protection), and session management. These cookies are necessary for the Platform to function. We do not use third-party advertising cookies or tracking cookies.

We collect anonymized usage analytics through Supabase and Vercel Analytics to understand how the Platform is used — which pages are visited, which features are popular, and where users encounter issues. This data is aggregated and does not identify individual users.

You can disable cookies in your browser settings, but some features of the Platform may not work properly without them.

10. Children's Privacy

SShubbd.info is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@sshubbd.info.

Users under the age of 18 must have parental or guardian consent to create an account and make purchases.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If the changes are significant, we will notify you by email (if you have an account) or through a notice on the Platform. We encourage you to review this page periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions, concerns, or requests regarding your privacy or this policy, please contact us:

• Email: privacy@sshubbd.info
• Contact form: sshubbd.info/contact
• Response time: We aim to respond to privacy inquiries within 72 hours.