Effective 4 October 2026
Privacy Policy
This policy explains what AmarShomoy, operated by Rabbi Mehedi Ullah in Bangladesh, collects, why we use it, and the choices you have. It applies to the website, the app, early-access requests, and email we send about the service.
AmarShomoy is offered in English and Bangla. If the two versions differ, the English version controls.
Who is responsible
For your account and the way the service runs, Rabbi Mehedi Ullah is the controller of personal data. For client details, logos, and seat information you choose to store, you decide the purpose. We process that data as your processor, only to provide the service.
Data we collect
Account data: name, email, password (stored as a hash), role, plan, language, theme, and currency preferences.
Finance data you enter: cash movements, accounts, costs, dues, cards, deposits, projects, businesses, clients, invoices, quotes, notes, and files such as logos. An optional location can be stored on a cash movement if you add one.
Access and payment data: early-access requests (name, email, optional phone, company, and message), the IP address of that request, and plan payments you submit (amount, method, payer phone, and transaction reference).
Technical data: session cookies needed to keep you signed in, a locale preference, security logs, and the time you accepted these terms.
Why we use it
We use this data to create and secure your account, provide runway and bookkeeping features, send invites and service email, review access and plan payments, prevent abuse, and keep the service reliable.
Where the GDPR or UK GDPR applies, our bases are: contract (providing the service you asked for), legitimate interests (securing and improving the product, and answering you), consent (where we ask for it, such as an optional location), and legal obligation (keeping records we are required to keep).
Who can see it
We do not sell personal data.
People you invite to a project can see that project’s finance data. They cannot see your personal book unless you also put that data there.
Our administrators can open an account to investigate abuse, to answer a support request, or to verify a payment. That access is limited to admin roles and is not used for advertising.
We use infrastructure and email providers to host the app and deliver mail. They process data only so we can run AmarShomoy. We may also disclose data if the law, a court, or a regulator requires it, or to protect users and the service from harm.
Where it is processed
We operate from Bangladesh. Hosting and email providers may process data in other countries. Where a transfer out of the EEA or the UK needs a safeguard, we rely on the provider’s contractual protections or another mechanism the law allows.
How long we keep it
We keep account and finance data while your account is open. If you ask us to delete the account, we delete or irreversibly anonymise the personal data we no longer need, except records we must retain for tax, accounting, fraud prevention, or legal claims.
Early-access requests and payment reviews are kept long enough to decide the request and to evidence that decision.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to lodge a complaint with a data-protection authority.
You can export cash activity from the app. To delete an account or exercise another right, contact us. We may need to confirm it is you. We respond within the time the applicable law requires.
Children
AmarShomoy is not for anyone under 18. We do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.
Cookies
We use cookies and similar storage that are needed to sign you in, remember the session, and store your language. We do not use third-party advertising cookies.
Security
We use access controls, hashed passwords, and scoped books so one workspace does not read another. No online service is perfectly secure. Tell us promptly if you suspect unauthorised access.
Changes
We may update this policy. The effective date at the top will change. Continued use after that date means you have read the update.
Contact
Send a note through the early-access form and start the message with “Terms” or “Privacy”. Request early access