Privacy Policy

📥 1. Information We Collect

We collect information you provide directly to us and information collected automatically when you interact with our services.

1.1 Information You Provide

• Account Information: Name, email address, phone number, company name when you register for a client account.
• Project Details: Project descriptions, requirements, files, and communications you share with us.
• Payment Information: Transaction IDs, payment method (bKash/Nagad/SSLCommerz), and billing details. We do not store full card numbers.
• Communications: Messages, emails, and support requests you send us.
• Contact Form Data: Name, email, service inquiry, and budget information submitted through our website.

1.2 Information Collected Automatically

• Usage Data: Pages visited, time spent, clicks, and navigation patterns.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: Session tokens, preference data, and analytics identifiers. See our Cookie Policy.
• Log Data: Server logs including access times, error logs, and referrer URLs.

🎯 2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our IT services and client portal.
• Communication: To send project updates, invoices, receipts, and important service notifications.
• Billing & Payments: To process transactions, generate invoices, and maintain financial records.
• Customer Support: To respond to inquiries, resolve disputes, and provide technical assistance.
• Legal Compliance: To fulfill legal obligations, including tax and financial reporting requirements.
• Security: To detect fraud, prevent unauthorized access, and protect the security of our systems.
• Analytics: To understand usage patterns and improve our website and services.
• Marketing: Only with your explicit consent, to send relevant service updates or promotional content.

🤝 3. Information Sharing & Disclosure

We do not sell your personal data. We may share your information in the following limited circumstances:

• Service Providers: Trusted third-party vendors (Firebase/Google, payment processors) who help us deliver services under strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or governmental authority in Bangladesh or internationally.
• Business Transfers: In connection with a merger, acquisition, or sale of business assets, with notice to you.
• With Your Consent: Any other disclosure will only occur with your explicit permission.

🗓️ 4. Data Retention

We retain your personal information for as long as necessary to provide services and comply with legal obligations. Specifically:

• Client account data is retained for the duration of the business relationship plus 3 years.
• Financial and invoice records are retained for 7 years per Bangladesh financial regulations.
• Inactive accounts are purged after 36 months of inactivity with 30-day advance notice.
• You may request earlier deletion subject to our legal obligations.

⚖️ 5. Your Rights & Choices

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you.
• Rectification: Correct any inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data where no legal obligation prevents it.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdrawal of Consent: Withdraw marketing consent at any time without affecting prior processing.

To exercise these rights, contact us at privacy@nexevent.tech. We will respond within 30 days.

🛡️ 6. Security Measures

We implement industry-standard security measures to protect your information:

• Data encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Firebase Authentication for secure client access with multi-factor options.
• Firestore security rules restricting data access to authorized users only.
• Regular security audits and penetration testing.
• Employee access controls limiting data access to those who need it.

🍪 7. Cookies & Tracking

We use cookies and similar tracking technologies. Please review our Cookie Policy for detailed information about the cookies we use and how to manage your preferences.

🔗 8. Third-Party Services

Our services integrate with the following third parties, each with their own privacy practices:

• Google Firebase: Authentication, database, and hosting — Firebase Privacy
• bKash: Mobile payment processing — bKash Privacy Policy
• SSLCommerz: Payment gateway — SSLCommerz Privacy Policy
• Google Analytics: Website analytics — Google Privacy Policy

👶 9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete such information.

🌍 10. International Transfers

Your information may be transferred to and processed in countries other than Bangladesh, including Google's servers in the United States. We ensure appropriate safeguards are in place through standard contractual clauses and data processing agreements with our service providers.

📝 11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or prominent notice on our website at least 30 days before the change takes effect. Your continued use of our services after such notice constitutes acceptance of the updated policy.

📧 12. Contact Us

For privacy-related inquiries, requests, or complaints, please contact our Data Protection Officer: