Security & Privacy
Your customers' data and your business data are protected at every layer. Here's how Zafsoft Solution, the operator of Bangla Perks, keeps the platform secure.
TLS 1.2+
Data encrypted in transit
Encrypted at rest
Stored data is encrypted
Payments by bKash & Nagad
We never see your PIN
Role-based access
Staff see only what they need
Regular backups
Your data is backed up regularly
Export anytime
Your data stays yours
Data Encryption
Data is encrypted in transit with TLS 1.2+ and encrypted at rest. Passwords are hashed and never stored in plaintext.
Access Control
Role-based access for your staff — owners, managers and staff each see only what their role needs. Sign-in is token-based with one-time passcode verification.
Change History
Important actions such as stamps, redemptions and settings changes are recorded with who made them and when, so you can review what happened.
Infrastructure
Hosted with a cloud provider in North America, with restricted administrative access and separate production and staging environments. Data is backed up regularly.
Keeping Things Patched
We keep our dependencies and infrastructure up to date and welcome reports from security researchers through responsible disclosure.
Privacy
We collect only what's needed to run your loyalty program and never sell customer data. See our Privacy Policy for how GDPR and CCPA requests are handled.
Security FAQ
- Where is my data stored?
- Customer data is stored with our cloud hosting provider in North America. Bangla Perks is operated by Zafsoft Solution from Dhaka, Bangladesh, so our authorized staff may access it from there.
- Can I delete my data?
- Yes. You can export or delete all business and customer data at any time from the dashboard settings. On account termination, all data is deleted within 30 days.
- How do you handle security vulnerabilities?
- We follow a responsible disclosure policy. If you discover a vulnerability, please contact support@banglaperks.com. We aim to acknowledge reports promptly.
- How are payments handled?
- We accept bKash and Nagad only. You confirm each payment with your PIN inside their secure flow, and Bangla Perks never sees it.
Report a vulnerability
We follow a responsible disclosure policy. If you find a security issue in Bangla Perks, please email us. We aim to acknowledge reports promptly and keep you updated while we investigate.