Skip to content
Itqano
Legal

Privacy Policy

How Itqano collects, uses, shares and protects personal data — and the choices you have.

Last updated: August 2026

On this page

  1. 011. Who we are
  2. 022. Scope of this policy
  3. 033. Data we collect
  4. 044. How we use your data
  5. 055. Consent and legal basis
  6. 066. AI processing
  7. 077. Sharing and cross-border transfers
  8. 088. Data retention
  9. 099. Security
  10. 1010. Your rights
  11. 1111. Children’s privacy
  12. 1212. Changes to this policy
  13. 1313. Contact

1. Who we are

Itqano is the data controller for personal data collected through this Website. We are a sole proprietorship operating under Trade License Book No 17309, License No 04, issued by Gazipur City Corporation, Bangladesh, and based in Gazipur, Bangladesh.

For client engagements where we process our clients’ own customer data on their behalf, the client is the controller and Itqano acts as processor under the engagement agreement, including data-processing terms where required. For privacy matters in either role, email hello@itqano.com

2. Scope of this policy

This policy covers itqano.com, our project intake and communication channels, and the AI Playground on this Website. Our products — including Dokaniai — are separate services that publish their own privacy policies on their own websites.

3. Data we collect

  • Contact data you submit through forms: name, email, phone, company and message.
  • Project materials you share with us, such as briefs and RFP attachments.
  • Newsletter subscription data: your email address.
  • AI Playground inputs: the prompts you type into the on-site demo — these are not stored by us (see Section 6).
  • Technical data collected automatically through cookieless, aggregate analytics (Vercel Analytics): pages visited, approximate country and referral source.
  • Preference data stored in cookies, such as your chosen language — see our Cookie Policy.

4. How we use your data

  • Respond to your enquiries and prepare proposals.
  • Deliver and manage contracted services.
  • Send our newsletter, if you subscribed — you can unsubscribe at any time.
  • Understand how the Website is used, in aggregate, so we can improve it.
  • Detect, prevent and address fraud, abuse and security issues.

6. AI processing

The AI Playground sends the prompt you type to our API, which calls Google Gemini models to generate a response. We do not store your prompts. The only Playground-related record we keep is a transient, in-memory counter of requesting IP addresses used solely for one-minute rate-limiting windows; it is not linked to your prompt and is discarded automatically. Google processes the prompt under its own API terms — one more reason not to submit confidential personal or business information into the Playground.

7. Sharing and cross-border transfers

We do not sell your personal data. We share it only with: service providers acting as processors under contract (hosting, email, aggregate analytics and AI providers); the product websites you choose to visit; and public authorities where disclosure is required by applicable law, including Bangladesh’s cyber security legislation in force from time to time.

Because we serve global clients, your data may be processed outside Bangladesh — for example in the United States, Singapore or the European Union. We select providers that offer strong data-protection commitments and apply contractual safeguards to international transfers.

8. Data retention

  • Enquiry and form data: up to 24 months after our last contact with you.
  • Client project data: for the duration of the engagement and any period required by law or tax rules.
  • Newsletter data: until you unsubscribe.
  • AI Playground: prompts are not stored; the transient rate-limiting counter is discarded within minutes.
  • Analytics data: aggregate, non-identifying statistics per our analytics provider’s standard retention.

9. Security

We protect data with TLS encryption in transit, access controls and least-privilege practices. No method of transmission or storage is completely secure, but if we become aware of a breach affecting your personal data we will notify you and the relevant authorities as required by law.

10. Your rights

Whatever the legal basis, you can always:

  • access the personal data we hold about you;
  • have inaccurate or incomplete data corrected;
  • request deletion of your data;
  • withdraw your consent;
  • object to specific processing;
  • receive an exportable copy of your data.

Email the address in Section 13 and we will respond within 30 days.

11. Children’s privacy

This Website is not directed at persons under 18. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time; the date above reflects the current version, and we will post a notice on the Website for significant changes.

13. Contact

For any privacy question, request or complaint, email hello@itqano.com