Privacy policy
What information Mahatosoft collects when you contact us or hire us, why we hold it, and how to have it removed.
Last updated 1 September 2026 · Mahatosoft, Rajshahi, Bangladesh
1. What we collect
We collect only what we need to answer you and do the work. When you send an enquiry or place an order that is your name, email address, company name if you give one, the website address in question and whatever you write in the brief.
When we are engaged on a project we are usually also given access credentials for a hosting account, a CMS or a repository. We treat those as the most sensitive data we hold.
2. Analytics and cookies
Our own site uses privacy-respecting analytics to count page views and referrers in aggregate. We do not build advertising profiles, we do not sell data, and we do not run third-party advertising trackers.
The site sets no cookies for marketing purposes. Any cookie present is functional — remembering a form state, for example.
3. How we use your information
We use what you send us for these purposes only:
- Replying to your enquiry and preparing a scope and quote
- Delivering and supporting the work you have engaged us for
- Issuing invoices and keeping the accounting records we are required to keep
- Sending our newsletter, if and only if you asked for it
4. Credentials and access
Credentials are stored in an encrypted password manager, are never sent over an unencrypted channel, and are used only for the agreed work. We ask you to revoke our access at the end of an engagement, and we will remind you to do so.
Where a client prefers, we work through a temporary account with the narrowest permissions the job allows.
5. Who else sees it
Nobody outside our team, with three exceptions: the email provider that carries our correspondence, the payment processor handling your invoice, and any hosting provider you have asked us to work with on your behalf. Each is used only for that purpose.
We do not pass your details to marketing partners, resellers or data brokers. There are none.
6. How long we keep it
Correspondence and project files are kept for two years after the last work, because returning clients frequently need them. Invoices are kept for the period required by law. Credentials are deleted when the engagement ends.
7. Your rights
You can ask us at any time for a copy of what we hold about you, ask for it corrected, or ask for it deleted. Email us and we will action it within seven days, or explain if a legal retention duty prevents deletion of a specific record.
8. Changes and contact
If this policy changes materially we will update the date at the top and, where we hold your address for an active project, tell you directly. Questions or requests go to info@mahatosoft.com.
This document is written in plain English rather than legal boilerplate. It describes how we actually work. If your organisation needs these terms in a specific contractual form, email us and we will work from your template.
Free 15-minute consultation
Let’s scope your project properly.
Tell us what you need built or fixed. You get an approach, a timeline and a fixed price — usually within a few hours.