1. Information we collect

We collect the following categories of information:

• Account information: name, email address, organisation, country, and password (stored hashed).
• Purchase information: billing name, billing address, tax identifiers where required, and a payment token from our payment partner. We do not store full card numbers.
• Usage data: pages visited, downloads, API calls, IP address, browser type, and device metadata for analytics and security.
• Support communications: messages you send us and their metadata.

2. How we use information

• Deliver the datasets, dashboards, and services you request.
• Process payments, invoicing, refunds, and tax compliance through our merchant-of-record partner.
• Authenticate access, prevent fraud, and secure our platform.
• Send transactional emails (receipts, license notices, product updates you subscribed to).
• Improve datasets, methodology, and site experience via aggregated analytics.
• Comply with legal obligations and enforce our Terms of Service.

3. Legal basis

Where applicable law requires a legal basis (for example, the EU/UK GDPR), we rely on: performance of a contract, our legitimate interests in running and securing the Services, your consent for optional communications, and compliance with legal obligations.

4. Sharing of information

We share personal information only with:

• Payment processor / merchant of record for checkout, tax, and fraud prevention.
• Cloud & email infrastructure providers that host and deliver the Services under confidentiality obligations.
• Analytics providers using anonymised or pseudonymised data.
• Legal & regulatory authorities when required by law or to protect rights and safety.

We do not sell your personal information.

5. International transfers

CFSBR operates from Bangladesh and uses infrastructure partners that may process data in other jurisdictions. Where required, we use contractual safeguards with these partners.

6. Data retention

We retain account and transaction records for as long as necessary to provide the Services and to meet tax, accounting, and legal requirements (typically up to 7 years for financial records). Analytics data is retained in aggregated form.

7. Your rights

Subject to local law, you may request access, correction, deletion, or export of your personal information, or object to certain processing. To exercise these rights, email databank@cfsbr.com from the email address on your account.

8. Cookies

We use strictly-necessary cookies for authentication and security, and limited analytics cookies to understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in or completing purchases.

9. Security

We use industry-standard measures — TLS in transit, encryption at rest for sensitive fields, least-privilege access, and audit logging — to protect your information. No system is perfectly secure; please use a strong unique password and notify us of any suspected compromise.

10. Children

The Services are not directed to children under 16. If you believe a child has provided us personal information, please contact us and we will delete it.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated on this page with an updated effective date.

12. Contact

For privacy questions or requests, email databank@cfsbr.com. See also our Terms of Service and Refund Policy.