Privacy Policy

Two kinds of information

• Your account information — your name, email address, password (stored only as a secure hash) and billing records. We are responsible for this information.
• Your business records — products, sales, customers, suppliers, staff, accounts and anything else you enter. You control this information; we store and process it only to run Bonikly for you.

What we collect

• Details you give us when you sign up, set up your organization or contact support.
• Payment records: plan, amount, date, payment method and transaction ID. We never see your bKash PIN, OTP or card details.
• Technical information needed to keep the service secure: sign-in times, IP address and browser type, kept in server logs for a limited time.
• An audit log of changes made inside your organization (who changed what, and when), which owners can see.

How we use it

• To provide Bonikly: sign you in, store your records, show your reports.
• To take payments and keep billing records we are required to keep.
• To send service emails, such as confirming your email address and telling you about important changes.
• To prevent abuse and keep accounts secure.

We do not sell your information, use your business records for advertising, or share them with other Bonikly customers. Our staff look at your business records only when you ask for help or when needed to fix a problem or meet a legal obligation.

Who processes data for us

We use a small number of service providers, each bound to protect the data and use it only for the service they provide:

• Supabase — database and sign-in, hosted in Singapore.
• Vercel — hosts the Bonikly website and application.
• bKash — processes bKash payments you choose to make.
• Our email provider — sends account and billing emails.

This means your information is stored on servers outside Bangladesh.

Cookies

Bonikly uses only the cookies needed to keep you signed in and remember choices such as which organization you were viewing. We do not use advertising or tracking cookies.

How long we keep it

• Business records are kept while your account is open. Records are never deleted just because a paid plan ended.
• When you ask us to close your account, we delete your organization's data within 30 days, except billing records we must keep by law. Copies in backups expire on their normal schedule.

Security

Data is encrypted in transit. Each organization's records are separated inside the database itself, staff access is limited by role, and changes are recorded in an audit log. No system is perfectly secure; if a breach affects your information, we will tell you promptly.

Your choices

• See and correct your account details in the app, or ask us for a copy of the information we hold about you.
• Download your records as CSV (on plans that include exports), or ask us for a copy or to delete your account.
• If your own customers ask about their information in your records, you (as the business) handle the request; we will help you do so.

Children

Bonikly is for businesses and is not meant for anyone under 18.

Changes

We will post updates here and tell owners about significant changes by email or in the app.

Contact us

• Business: [legal business name — to be added]
• Address: [business address — to be added]
• Email: [support email — to be added]
• Phone / WhatsApp: [support phone — to be added]