Privacy Policy

Last updated: 22 October, 2026

This Privacy Policy explains how Biddaloy ERP ("we", "us") collects, uses, and protects information when your Institution uses our management platform (the "Platform").

1. Information We Collect

• Institution details — name, type, EIIN number, address, phone, and email provided during registration.
• Admin and staff details — name, email, phone, and role of staff accounts created within the dashboard.
• Student and guardian details — entered by your Institution to operate features such as attendance, results, and fee management.
• Payment information — installation fee and subscription payment records (amount, method, status). Card/mobile-banking details are handled directly by our payment gateway partner (SSLCommerz) — we do not store your card numbers.
• Usage data — basic technical information such as login timestamps, used to keep accounts secure (e.g. detecting simultaneous logins).

2. How We Use Information

• To provide, operate, and maintain the Platform for your Institution.
• To process installation fees and subscription payments, and to confirm successful payments.
• To communicate with you about your account, support requests, and important service updates.
• To improve the reliability and features of the Platform.
• To detect and prevent fraud, abuse, or unauthorized access.

3. Data About Students

Student records are entered and controlled by your Institution, which acts as the data controller for that information. We process it only to provide the Platform's features (attendance, results, fees, etc.) to your Institution, and we expect Institutions to obtain any consents required under applicable law (e.g. from parents or guardians) before entering student data.

4. How We Share Information

• We do not sell your Institution's or students' personal data.
• We share payment details with our payment gateway partner (SSLCommerz) solely to process online payments.
• We may disclose information if required by law, court order, or to protect the rights, safety, or property of Biddaloy ERP, our users, or the public.

5. Data Security

• Passwords are stored using industry-standard hashing and are never stored or visible in plain text.
• Sensitive configuration values (such as payment gateway credentials) are stored encrypted.
• Access to Platform-level administrative functions is role-based and access-controlled.
• No method of transmission or storage is 100% secure; we work to protect your data but cannot guarantee absolute security.

6. Data Retention

We retain Institution and student data for as long as the Institution's account remains active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. An Institution may request deletion of its data by contacting our support team, subject to any records we are legally required to keep.

7. Cookies

We use essential cookies/session storage to keep you signed in and to remember basic preferences (such as light/dark mode). We do not use third-party advertising cookies.

8. Your Rights

Depending on your role and applicable law, you may request access to, correction of, or deletion of personal data associated with your account by contacting your Institution's administrator or our support team directly.

9. Children's Information

The Platform is designed for use by school staff and administrators, not directly by children. Student information is entered and managed by authorized Institution staff on behalf of the Institution, in accordance with the Institution's own policies and applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated where practical, and continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

11. Contact

Questions about this Privacy Policy or how your data is handled can be sent to our support team through the contact details provided on the Platform or via the Support Tickets section of your dashboard.