Privacy Policy

1.1 Information You Provide Directly

• •Contact Information: Name, email, phone, company name
• •Demo Requests: Business details, industry sector, number of outlets
• •Support Inquiries: Issue descriptions, communication history
• •Payment Information: Billing details (processed securely via payment gateways)
• •Account Credentials: Username, password (encrypted with bcrypt/argon2)

1.2 Information Collected Automatically

• •Device Information: IP address, browser type, operating system
• •Usage Data: Pages visited, time spent, feature usage patterns
• •Cookies & Tracking: Google Analytics, Google Tag Manager for web analytics
• •Error Logs: Technical diagnostics and crash reports for debugging

1.3 Business Data in Our Products

• •SECTORiX: Inventory records, sales transactions, customer data, financial records
• •eRestu: Restaurant orders, menu items, payment records, customer preferences
• •eHRDesk: Employee records, payroll data, attendance logs, PF/Gratuity calculations

• •Deliver our services and process transactions
• •Provide customer support and technical assistance
• •Improve our products and develop new features
• •Send service updates, security alerts, and important notices
• •Detect and prevent fraud, unauthorized access, and security threats
• •Comply with legal obligations and respond to lawful requests

• •We do NOT sell your personal information to third parties
• •Service Providers: Cloud hosting (AWS, DigitalOcean), payment processors (bKash, Nagad, Stripe) — bound by confidentiality agreements
• •Legal Obligations: When required by Bangladesh law or valid legal process
• •Business Transfers: In the event of a merger or acquisition (you will be notified)
• •Your Consent: When you explicitly authorize us to share your data

We implement industry-standard security measures:

• •SSL/TLS encryption for all data transmission
• •Passwords hashed using bcrypt/argon2
• •Role-based access controls (RBAC) for user permissions
• •Automated daily backups with encrypted storage
• •Continuous security monitoring and intrusion detection
• •Regular security patches and vulnerability assessments

Limitations:

• •No method of transmission over the internet is 100% secure
• •You are responsible for maintaining the confidentiality of your account credentials
• •Notify us immediately if you suspect unauthorized access

• •We retain your data as long as your account is active or as needed to provide services
• •After account termination: Data deleted within 90 days unless legally required to retain
• •Business records: Retained for 7 years to comply with Bangladesh tax and accounting laws
• •You can request data deletion at any time (subject to legal obligations)

You have the right to:

• •Access: Request a copy of your personal data
• •Correction: Update or correct inaccurate information
• •Deletion: Request deletion of your data (subject to legal obligations)
• •Portability: Export your data in machine-readable format (JSON/CSV)
• •Opt-Out: Unsubscribe from marketing emails at any time

How to exercise your rights:

• •Email: privacy@apptimatic.com
• •Response time: Within 30 days of verified request

We use cookies for:

• •Session Management: Keep you logged in
• •Analytics: Understand how visitors use our website (Google Analytics)
• •Performance: Measure page load times and optimize experience

Cookie Management:

• •You can disable cookies in your browser settings
• •Disabling cookies may affect website functionality

• •Our services are not intended for individuals under 18 years of age
• •We do not knowingly collect data from children
• •If we learn we have collected data from a child, we will delete it immediately

• •Your data is primarily stored in Bangladesh data centers
• •Some services (AWS, Google Analytics) may process data internationally
• •We ensure adequate safeguards are in place for cross-border transfers

• •We may update this policy to reflect changes in our practices or legal requirements
• •Material changes will be notified via email or prominent website notice
• •Last Updated date will always reflect the most recent revision
• •Continued use of services after changes constitutes acceptance