Privacy Policy
How Digipassa handles your data across our three product lines — Extension License Packages, Digital Products, and Digital Tools — for customers and resellers in Bangladesh.
Who this policy is for
Digipassa operates a single storefront with three distinct product lines: (1) Extension License Packages — activation keys bound to a browser/device, (2) Digital Products — one-time downloadable assets and files, and (3) Digital Tools — subscription-based access to hosted utilities. This policy explains what we collect for each line, why we need it, and how long we keep it. It applies to customers, resellers, and visitors browsing without an account.
What we collect for Extension License Packages
To issue and protect license keys, we record your account email, the key itself, an extension/browser device fingerprint (a hashed device ID — never raw hardware data), activation timestamps, IP at activation, and the bound extension slug. This data is what lets a key work on your machine and stop working when it's revoked or transferred. We do not read page content, browsing history, or anything the extension sees on the websites you visit.
What we collect for Digital Products
For downloadable products we store your order, the file(s) you purchased, signed download URLs we generate on request, and a download log (count + timestamp) used purely for abuse prevention and re-delivery support. We do not embed trackers inside the files you download.
What we collect for Digital Tools
Tool subscriptions require the email tied to your plan, the tool slug, plan tier, validity window, and a per-session token used to open the tool. When a tool calls our edge functions on your behalf (for example, AI assist or proxy commands), we log the action type and timestamp — never the prompt content or output — so we can enforce per-hour rate limits and bill credits fairly.
Payments — bKash, Nagad, Rocket, cards & manual top-ups
Payments flow through our integrated gateways (aamarPay, ShurjoPay, UddoktaPay) or as reseller manual top-ups. We store only the payment reference / transaction ID, amount, currency, and status returned by the gateway. Full card numbers, mobile-wallet PINs, and OTPs never reach our servers — they are entered on the gateway's own page.
Reseller & customer panel data
If you join the reseller program we additionally store your business name, contact phone, wallet balance, generated keys, customer list you created keys for, and a leaderboard rank derived from your sales. Customers in your downline see only the branding you configure — never your personal identity.
How we use your data
Strictly to: deliver and re-deliver your purchase, bind/unbind license keys to devices, run anti-fraud checks, send transactional email (order confirmations, key delivery, password reset), and answer support tickets. We do not sell, rent, or share customer lists with marketers. AI features (when enabled) send only the minimum payload required for that feature to Google Gemini and are not used to train external models.
Cookies & local storage
We use first-party storage for: your auth session, language preference (EN/BN), currency, cart contents, and a one-time coupon-popup flag. No third-party advertising cookies. Analytics, if enabled by the store owner, is aggregated and IP-truncated.
Data security
All traffic uses HTTPS. The database enforces row-level security so a customer can only read their own keys, orders, and downloads; resellers can only read their own downline. Admin endpoints require an explicit admin role and are audited. Service-role credentials are used only by verified server functions, never shipped to the browser.
Retention & your rights
Order records and license keys are retained for the life of the license (so we can re-deliver or re-activate). Download logs are kept 12 months. Closed accounts are anonymised within 30 days of a deletion request, except where Bangladesh tax / accounting law requires longer retention of the transaction record. You can request export, correction, or deletion of your personal data from your customer panel or by contacting support.
Contact
Privacy questions, deletion requests, or suspected misuse of a license key: reach the support address shown in the Digipassa footer. We respond within 2–3 business days.