What we collect
- Account data: your name, mobile number, password (stored only as a secure hash), and your chosen language.
- Financial data: your investments, distributions, commissions, rewards and the ledger entries behind them.
- Device and session data: device model, OS version, app version, IP address and session activity, used to show you your active sessions and to detect abuse.
- Support data: messages you send us.
We do not collect payment credentials. Payment provider integrations are not active, and when they are, card or wallet credentials are handled by the provider, never by us.
How we use it
- To operate your account, process investments and pay distributions.
- To calculate referral commissions, ranks and rewards.
- To detect and investigate fraud and abuse.
- To provide support and send you transactional notifications.
- To meet legal and record-keeping obligations.
What we never do
- We never embed your password, login token or account details in a download link, deep link, referrer or analytics event.
- We never sell your personal data.
Sharing
We share data only with service providers who help us run the platform (hosting, SMS, payment providers once enabled), under contract, and with authorities where the law requires it.
Retention
Financial records are retained as long as the law requires, which may be longer than your account remains open. Account deletion is described in the Account Deletion Policy.
Your choices
- You can see and revoke your active sessions in the app.
- You can request a copy of your personal data, or request deletion of your account, from the app or our website.
- You can change your language at any time.
Security
Passwords are hashed. Sensitive values such as payout account numbers and provider credentials are encrypted at rest. Administrative access requires multi-factor authentication and every sensitive action is recorded in an audit log.
Contact
Use the support section of the app or the contact details on our website.
Note: This document is a starting draft that describes how the platform actually operates. It must be reviewed by a qualified Bangladeshi lawyer before launch.