EFFECTIVE 2026-01-01

Privacy Policy

01 / WHAT WE COLLECT

Account email, shipping address, order history, basic device telemetry, and any messages you send to support. We do not collect biometric data, race, or political opinion.

02 / HOW WE USE IT

Fulfilling orders, fraud prevention, customer support, and improving our product. We do not sell personal data.

03 / WHO WE SHARE WITH

Payment processor, shipping carriers, and analytics. Each is bound by a data-processing agreement.

04 / RETENTION

Account data for the life of the account. Order records for 7 years to satisfy tax law. Marketing data until you opt out.

05 / YOUR RIGHTS

Access, correction, deletion, portability, objection. Email support@flexforge.fit to file a request. Response within 30 days.

06 / WHO PROCESSES YOUR DATA

Order data flows through these processors, each under a data-processing agreement: UddoktaPay (payment processing), Steadfast (shipping and delivery), Supabase (database and authentication hosting), Resend (transactional email delivery), PostHog (product analytics and session insights), and Sentry (error monitoring). Data leaves Bangladesh only where the processor's infrastructure requires it, and only to the minimum extent needed to deliver the service.

07 / GOVERNING LAW

This policy and any dispute arising from it are governed by the laws of the People's Republic of Bangladesh. The courts of Dhaka have exclusive jurisdiction. Flexforge operates from Bangladesh and serves customers within Bangladesh only.