Privacy Policy

Last Updated: 27 August 2026

1. Introduction

Fatiha Tech is a Bangladesh-based IT and software solutions company. This Privacy Policy explains what information we collect through our website fatihatech.com and our software services, how we use it, and the choices available to you.

This policy distinguishes between three different types of information:

• Website visitor information — collected when someone browses our website or submits an enquiry.
• Customer / account information — collected when a business becomes our customer and an account or project is created.
• Business / software data — the operational data a customer enters into the software we supply, such as products, invoices, stock and ledger records.

This policy should be read together with our Terms & Conditions. Specific projects or subscriptions may have additional data-handling arrangements set out in the relevant service agreement.

2. Information We Collect

2.1 Information Provided by Users

When you contact us, request a demo, ask for a quotation or subscribe to updates, you may provide:

• Name and designation
• Business or organisation name
• Email address and phone number
• Business location or branch details
• Your requirement description, industry type and any documents you choose to share

2.2 Automatically Collected Information

When you visit our website, limited technical information may be collected automatically, such as IP address, browser and device type, operating system, pages viewed, referring page and time of visit. This is used for security, troubleshooting and understanding overall website usage.

2.3 Business Information

For customers and prospective customers, we may hold business information needed to prepare proposals, deliver services and issue invoices — for example trade name, address, business type, number of branches or outlets, tax or VAT identifiers where required, and authorised contact persons.

2.4 Account Information

Where an account is created in our software, we hold account-level details such as username, contact email, assigned role and permission, branch access, subscription plan, and activity or login records needed for security and support purposes.

3. How We Use Information

We use information to:

• Respond to enquiries, arrange demos and prepare quotations
• Provide, configure, implement and maintain the services you purchase
• Create and administer user accounts and subscriptions
• Provide technical support and resolve reported issues
• Issue invoices, process payments and maintain accounting records
• Improve our products, documentation and website
• Protect against fraud, misuse and unauthorised access
• Meet legal, tax and regulatory obligations applicable in Bangladesh

We do not sell personal information, and we do not use customer business data for advertising purposes.

4. Communication

We may contact you regarding your enquiry, project status, implementation schedule, invoices, subscription renewals, service notices, maintenance windows and support responses. Where you have opted in, we may also send product updates or informational messages; you can ask us to stop sending such messages at any time.

5. Cookies and Similar Technologies

Our website may use cookies or similar technologies to keep the site functioning correctly, remember basic preferences and understand aggregate usage. You can control or delete cookies through your browser settings, though disabling some cookies may affect certain website features.

6. Analytics

We may use analytics tools to understand how visitors use our website — for example which pages are viewed and how visitors arrive. Analytics data is used in aggregate form for improvement purposes and is subject to the analytics provider's own privacy terms.

7. Data Storage and Security

We apply reasonable technical and organisational measures to protect the information in our care, including access control, role-based permissions in our software, restricted internal access on a need-to-know basis, and use of reputable hosting infrastructure. Where hosting is arranged by the customer, security of that environment depends partly on the customer and their provider.

No system can be guaranteed to be completely secure. We do not claim certification under any specific compliance framework unless such certification is explicitly stated and verified in writing.

8. Data Sharing

We share information only where necessary, and only with:

8.1 Third-Party Service Providers

Hosting, email, communication, SMS and infrastructure providers that support the delivery of our services. These providers are expected to handle data only for the purpose of the service they provide.

8.2 Payment Providers

Where an online payment method is used, payment details are processed by the relevant payment provider under their own policies. Fatiha Tech does not store complete card or banking credentials.

8.3 API / Integration Providers

Where you enable an integration — such as a payment gateway, courier service, SMS gateway or external accounting tool — the data required for that integration is transmitted to the provider at your instruction and is then subject to that provider's terms and privacy policy.

8.4 Legal and Professional Disclosure

We may disclose information where required by applicable law, court order or a lawful request from a competent authority, or to protect our legal rights.

9. Business and Software Data

Business data entered into our software by a customer — including product, inventory, sales, purchase, accounting, customer and employee records — remains the property of that customer. Fatiha Tech acts as a service provider for such data.

Our personnel access customer business data only when reasonably necessary, for example to complete implementation, migrate data, investigate a reported fault or fulfil a support request authorised by the customer. We do not access, analyse or share customer business data unnecessarily.

10. Data Retention

We retain information for as long as needed to provide the services and for a reasonable period afterwards to meet accounting, contractual and legal requirements. Retention periods for customer business data after cancellation depend on the applicable plan or service agreement; customers are encouraged to export required data before service closure.

11. Data Deletion / User Requests

Customers may request deletion of their business data or account information, subject to verification of authority and to any legal or contractual record-keeping obligations that apply to us. Some records, such as invoices and payment history, may need to be retained even after deletion of operational data.

12. User Rights

Subject to applicable law and verification of identity, you may request to:

• Know what information we hold about you
• Correct inaccurate contact or business information
• Request deletion of information no longer required
• Withdraw consent for optional communications
• Request an export of your business data, where the system or agreement supports it

13. Children's Privacy

Our services are intended for businesses and organisations. We do not knowingly collect personal information from children. If we become aware that such information has been provided, we will take reasonable steps to remove it.

14. Changes to Privacy Policy

We may update this Privacy Policy as our services or legal obligations change. The updated version will be published on this page with a revised "Last Updated" date. Material changes affecting existing customers will be communicated where reasonably practical.

15. Contact Us

For privacy-related questions or requests, please use the contact details on our Contact page. For related terms, see our Terms & Conditions.