Privacy policy

Last updated: September 12, 2026

Scope and privacy principles

This policy explains how AgentSiraji handles personal information relating to visitors, prospects, customers, customer representatives, and users of our commercial services. We follow the principles of purpose limitation, data minimisation, accuracy, security, retention limitation, transparency, and accountability. Product-specific notices may apply where a service processes additional categories of information.

Information we collect

Depending on how you interact with us, we may collect identifiers and contact details such as name, email address, phone number and organization; commercial information such as selected product, plan, order, invoice, payment reference and subscription status; communications and support messages; onboarding and service-configuration information; fraud, security and audit records; and technical information such as IP address, browser, device, request and diagnostic data that our infrastructure generates.

Sources of information

We collect information directly from you, from your organization or authorized representatives, from payment and service providers that confirm transaction or service status, and automatically through the systems used to operate, secure, and diagnose the website and services. We do not intentionally obtain personal information from data brokers for sale or profiling.

Commerce and payment information

For AgentSiraji Commerce, we keep commercial records needed to manage plans, payments, subscriptions, invoices, onboarding, entitlements, support and account access. Card, wallet, or bank credentials entered directly into supported payment providers are handled by those providers and are not intended to be stored by AgentSiraji. Manual-payment evidence should contain only information reasonably necessary to verify the payment.

Purposes and lawful grounds

We process information to provide requested services and perform contracts; take steps requested before entering a contract; verify payments and manage subscriptions; respond to enquiries and support; secure our systems and prevent abuse or fraud; maintain accounting, audit and dispute records; improve service reliability and usability; comply with legal obligations; and pursue legitimate business interests where those interests are not overridden by applicable privacy rights. Where applicable law requires consent, we rely on consent and permit withdrawal as required by law.

How we share information

We may disclose information to hosting, database, email, payment, analytics, security, support, professional-adviser and operational service providers where reasonably necessary to deliver or protect the service. We may also disclose information when required by law, valid legal process, or to protect rights, safety, property, and service integrity. We do not sell personal information for money. If you allow optional measurement, we may share website and conversion event information with Meta and Google for analytics and advertising measurement; Meta conversion matching can include hashed contact details after an accepted enquiry.

International transfers

AgentSiraji and its service providers may process information in countries other than the country where you are located. Where applicable law requires transfer safeguards, we will use an appropriate lawful mechanism or other recognized safeguard and will provide relevant information on request where legally required.

Retention

We retain personal information only for as long as reasonably necessary for the purposes described here, including service delivery, payment and accounting records, legal or contractual obligations, fraud and security prevention, audit, dispute handling, and enforcement. Retention periods vary by record type. When information is no longer required, we delete, anonymize, or securely isolate it as appropriate, subject to lawful retention requirements.

Security

We use administrative, technical, and operational safeguards appropriate to the nature of the service, including access controls, encrypted transport, secure hosting practices, restricted secrets, validation, logging, replay/idempotency protections for payment events, and production feature gates. No online system can guarantee absolute security. If we become aware of a personal-data incident requiring notification under applicable law, we will take reasonable containment, investigation, remediation, and notification steps.

Your privacy rights

Depending on where you live and the law that applies, you may have rights to request access to personal information, correction, deletion, restriction, portability, information about processing, withdrawal of consent, objection to certain processing, or review of certain automated decisions. Where applicable, you may also have a right to complain to a data-protection authority and a right not to receive discriminatory treatment for exercising privacy rights. We will verify requests where reasonably necessary and may retain information where a lawful exception applies.

California and similar state privacy rights

Where a US state privacy law applies to AgentSiraji, eligible residents may exercise the rights provided by that law, which can include rights to know/access, correct, delete, obtain a copy, and opt out of covered sale, sharing, targeted advertising, or certain profiling. AgentSiraji does not currently sell personal information for monetary consideration. If our practices materially change, this policy and any required opt-out mechanism will be updated before the new practice is used where required.

Cookies and similar technologies

We use browser storage to remember your privacy choice and a private bKash order reference within your tab. Optional Meta Pixel, Meta Conversions API and Google tag measurement run only after you allow measurement. This can include page visits and accepted enquiries, Meta browser identifiers, Google measurement identifiers generated by Google's tag, and hashed email or phone details sent to Meta for conversion matching. Hashing does not make contact information anonymous. Use Privacy choices to withdraw permission for future Meta and Google measurement. Vercel Analytics and Speed Insights measure site usage and performance separately. We store bKash sender numbers, transaction IDs, dates and amounts for owner verification; we never request your bKash PIN or OTP.

Children

AgentSiraji's commercial website and Commerce services are intended for businesses and adults acting for businesses. We do not knowingly solicit personal information from children through these services. If you believe a child has provided personal information to us inappropriately, contact us so we can review and take appropriate action.

Automated decision-making

The current Commerce purchasing and account processes are not intended to make solely automated decisions that produce legal or similarly significant effects about individuals. If that changes, we will provide additional disclosures and rights where required.

Products in development

LeadPilot and AdIntel are not yet generally available. Doctor's Diary is a private healthcare project and is not currently offered for public sale. Product-specific privacy and security documentation will be completed before any public product begins processing sensitive or specially regulated categories of information.

Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The current version and its last-updated date will remain published here. Material changes will receive additional notice where applicable law requires it.

Contact and requests

For privacy questions or requests, contact business@agentsiraji.com. We will use reasonable steps to authenticate rights requests and respond within the period required by applicable law.