Privacy Policy & User Data Protection

Welcome to Digifix BD (“we”, “our”, or “us”). We are committed to protecting your privacy and handling your personal information with the highest standards of transparency and integrity.

This Privacy Policy explains what personal data we collect, why we collect it, how it is secured, and your rights regarding your data when you visit our website (https://digifixbd.com), create an account, authenticate via Google Sign-In, or purchase software licenses and digital services.

We collect only the minimum personal information necessary to deliver authentic digital products and provide reliable customer support:

• Account & Google Profile Information: When you sign up or log in using Google OAuth (“Continue with Google”), we receive your basic public profile details authorized by Google: your Full Name, Email Address, and Profile Avatar URL. We do not access, view, or store your Google account password.
• Order & Transaction Information: When placing an order, we collect contact information (phone number / WhatsApp number) for order fulfillment, delivery verification, OTP authentication, and billing receipts.
• Communications: Any support inquiries, feedback, or messages you submit through our contact forms or customer assistance channels.
• Technical & Diagnostic Logs: Pseudonymous diagnostic data such as IP address, browser type, device information, and timestamps used solely for fraud prevention, bot mitigation, and security logging.

Your personal data is used strictly for legitimate business and operational purposes:

• Account Creation & Authentication: To create and manage your customer profile, authenticate your identity securely, and maintain your active session.
• Order Fulfillment & Delivery: To allocate digital license keys, provide software activation tokens, configure custom engineering milestones, and send automated order status updates.
• Customer Support: To assist you with warranty claims, technical inquiries, setup guidance, and transaction disputes.
• Zero Unauthorized Monetization: We never sell, rent, lease, or trade your personal information or Google account data to third parties, data brokers, or advertising networks.
• No Automated Profiling or Ad-Targeting: Data collected via Google OAuth is never used for automated creditworthiness assessments, behavioral profiling, or personalized ad targeting.

We implement robust administrative, technical, and physical safeguards to protect your personal information against unauthorized access, loss, misuse, or alteration:

• Encryption in Transit: All communications between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / SSL with 256-bit encryption).
• PostgreSQL Row Level Security (RLS): Our database enforces strict Row Level Security policies at the database engine level. Authenticated users can only read and modify their own records; cross-account data access is technically blocked.
• Cloudflare Edge WAF: All web traffic passes through Cloudflare's Web Application Firewall (WAF), rate-limiting engines, and DDoS mitigation layers.
• Zero Card/PIN Storage: Financial payments are processed through accredited banking and Mobile Financial Service (MFS) gateways (bKash, Nagad, Rocket). We never receive or store debit/credit card numbers or banking PINs.

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Profile data and order history remain accessible while you maintain an active account on Digifix BD, allowing you to retrieve previously delivered digital keys and invoices.
• Transaction & Invoicing Records: Financial records are retained only to the extent necessary to comply with applicable tax, accounting, and anti-fraud statutory requirements.
• Inactive Data: Temporary verification tokens and one-time codes (OTPs) expire and are purged automatically within minutes to hours of generation.

You have full control over your personal data. Depending on your location and applicable privacy regulations, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete contact details.
• Erasure (Right to Be Forgotten): Request the permanent deletion of your account and personal profile data.
• Revocation of Google Access: You can revoke Digifix BD's access to your Google account at any time via your Google Account Security Settings.

Our storefront uses cookies and browser local storage strictly to ensure core site functionality:

• Authentication & Session State: We store session tokens (digifix_storefront_auth) locally in your browser so you remain logged in as you browse products.
• Shopping Cart & Preferences: Local storage is used to preserve your cart items, language preferences, and interface theme settings.
• Analytics: We use privacy-conscious analytics to understand aggregate traffic and improve navigation. You may disable cookies through your browser settings; core catalog browsing remains fully functional.

We may periodically update this Privacy Policy to reflect modifications in our services, technological advancements, or regulatory requirements. Any updates will be posted directly to this page with an updated “Last Modified” timestamp. For material changes, we may notify you through our website notice bar or via email.