Privacy Policy
Last updated: 15 May 2026
1. Who we are
HSNote (hsnote.com) is an online Bangladesh customs tariff and trade reference tool. We are operated by an individual developer based in Bangladesh. Contact: farhadh.35@gmail.com
2. What data we collect
- Account data: Email address, name, and hashed password when you register.
- Payment data: Transaction reference numbers from SSLCommerz/bKash. We never store full card numbers — payment processing is handled entirely by SSLCommerz.
- Usage data: Server logs (IP address, pages visited, timestamps) stored on Hostinger VPS. Not shared with third parties.
- Feedback: Text you submit via the translation feedback (💬) icon is stored in our database and may be used to improve translations.
- Cookies & storage: Session cookie (NextAuth), language preference (localStorage), theme preference (localStorage). No advertising cookies.
3. How we use your data
- Provide and improve the HSNote service
- Process subscription payments via SSLCommerz / bKash
- Respond to feedback and support requests
- Detect and prevent abuse
We do not sell your data to third parties. We do not use your data for advertising.
4. Data sharing
- SSLCommerz: Payment processor — receives transaction amount and reference. See SSLCommerz Privacy Policy.
- Hostinger: VPS provider hosting all data in their data centres. See Hostinger Privacy Policy.
- Legal disclosure: We may disclose data if required by Bangladesh law or court order.
5. Data retention
Account data is retained until you request deletion. Server logs are retained for 90 days. Payment records are retained for 7 years as required by Bangladesh tax regulations.
6. Your rights
You may request access to, correction of, or deletion of your personal data by emailing farhadh.35@gmail.com. We will respond within 30 days.
7. Security
Passwords are hashed using bcrypt. All traffic is encrypted via HTTPS (Let's Encrypt TLS). We do not store plain-text credentials. The VPS is access-restricted by SSH key authentication.
8. Children
HSNote is not directed at children under 13. We do not knowingly collect data from children.
9. Governing law
This policy is governed by the laws of Bangladesh, including the ICT Act 2006 and applicable data protection regulations.
10. Changes
We may update this policy. The "Last updated" date at the top reflects the current version. Continued use after changes constitutes acceptance.