Privacy Policy

Zafsoft Solution, a sole proprietorship registered in Bangladesh under Trade License TRAD/DNCC/019730/2026 (“Zafsoft Solution”, “we”, “us”, or “our”), operates Bangla Perks, the loyalty management platform at https://banglaperks.com. Zafsoft Solution is the data controller responsible for your personal data. We are committed to protecting the personal information of our customers, their end-users, and visitors to our platform.

We are based in Dhaka, Bangladesh, and serve customers in other countries. See “International transfers” in Section 5 for what this means for your data.

Account information: When you register, we collect your first and last name, work email address, phone number, company name, and a hashed password.

Business data: Information you provide about your business, including branding assets, loyalty program settings, and customer records you import or generate through the platform.

Payment information: Payments are made through bKash or Nagad. We never see your PIN — we keep only the payment confirmation details needed for our records, such as the transaction ID, amount and account number used.

Usage data: Log files, IP addresses, browser/device type, pages visited, and interactions with the platform (clicks, scans, redemptions) to improve our service.

Wallet pass data: When your customers add Apple or Google Wallet cards, we store the device identifiers required to push card updates.

We use the data we collect to:

• Provide, operate, and improve the Bangla Perks platform
• Process transactions and send billing notifications
• Send transactional emails (OTP verification, password resets, invoices)
• Send product updates and marketing emails (you can opt out at any time)
• Detect and prevent fraud and abuse
• Comply with legal obligations

For users in the European Economic Area and the United Kingdom, we process personal data on the following bases:

• Contract performance — to deliver the services you signed up for
• Legitimate interests — for platform security, fraud prevention, and product analytics
• Consent — for marketing communications (revocable at any time)
• Legal obligation — to comply with applicable laws

We do not sell your personal data. We share data only with:

• bKash and Nagad — payment processing
• Apple & Google — Apple Wallet and Google Wallet pass delivery and update tokens; Google Firebase Cloud Messaging for push notifications; Google Maps Platform for address lookup and location pickers in the merchant dashboard; optional Sign in with Google / Sign in with Apple
• Meta — the Meta Pixel on our own marketing website (see Section 8), and WhatsApp Business onboarding for merchants who choose to connect WhatsApp
• Anthropic — AI features such as drafting review replies and classifying review sentiment, when used by a merchant
• Email and hosting providers — transactional email delivery and the servers that host the platform
• Legal authorities — when required by law or court order

International transfers. We operate from Bangladesh, the platform is hosted with a cloud provider in North America, and the providers listed above may process data in other countries. Your personal data may therefore be transferred to, stored in, and accessed from countries other than your own, including Bangladesh. The data protection laws of those countries may differ from those where you live and may not offer the same level of protection. You can ask us about these transfers using the contact details in Section 12.

We retain account data for as long as your account is active, plus 30 days after closure to allow for data export, after which it may be permanently deleted. Anonymized, aggregated analytics data may be retained indefinitely. You may request deletion at any time (see Section 9).

We use TLS encryption in transit, hashed passwords, token-based authentication with one-time passcode verification, role-based access controls, and change-history logging. No method of transmission over the Internet is 100% secure — we cannot guarantee absolute security, but we follow industry best practices.

We use strictly necessary cookies and similar browser storage for authentication sessions and preferences. We use the Meta Pixel, provided by Meta Platforms, for marketing measurement on our own website (banglaperks.com): it records page views and conversion events such as contact or demo requests, sign-ups and subscriptions, may set cookies, and sends this information to Meta so we can measure the effectiveness of our advertising. The Meta Pixel is not loaded on white-label agency domains, or on the loyalty card, join, coupon and feedback pages our merchants share with their own customers. You can block or delete these cookies in your browser settings and manage how Meta uses your data in your Meta ad preferences. See our Cookie Policy for details.

If you are in the European Economic Area, the United Kingdom, or California, or in another place whose laws give you similar rights, we offer you the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent for marketing at any time

To exercise any of these rights, email us at zafsoftsolution@gmail.com. We will respond within 30 days.

California residents. You may also ask us what categories of personal data we have collected about you and how we have used and disclosed them, and we will not treat you differently for making such a request. We offer the rights in this Section as our commitment to the people they concern. This is not a statement that Zafsoft Solution has been certified or assessed under the GDPR, the CCPA, or any other law or scheme.

Bangla Perks is not directed to children under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this policy periodically. We will notify registered users by email and update the “Last updated” date above. Continued use of the platform after notification constitutes acceptance of the revised policy.

For privacy-related questions or requests, contact us at: zafsoftsolution@gmail.com

Or write to us at: