Privacy Policy

How we collect, use, and protect your data

Last updated: April 1, 2026

Welcome to Qosprey ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (qosprey.com), use our AdPilot platform, or engage with any of our digital services including web development, AI solutions, and digital marketing.

By using our services, you consent to the data practices described in this policy. If you do not agree, please discontinue use of our services.

1. Information We Collect

1.1 Personal Information

We may collect personally identifiable information that you voluntarily provide, including but not limited to:

  • Full name and contact details (email, phone number, WhatsApp number)
  • Business name and company information
  • Billing address and payment information (bKash account, card details)
  • Login credentials (email and encrypted password)
  • Social media account handles and ad account credentials (via OAuth)
  • Communication records (support tickets, chat messages, emails)

1.2 Automatically Collected Information

When you access our services, we may automatically collect:

  • IP address and geographic location
  • Browser type, operating system, and device information
  • Pages visited, time spent, and navigation patterns
  • Referral URLs and search queries
  • Cookies and similar tracking technologies

1.3 Third-Party Platform Data

When you connect your ad accounts (Meta, TikTok, Google Ads, Twitter) through our AdPilot platform, we access campaign performance data, ad metrics, audience insights, and billing information as authorized through each platform's OAuth scopes.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and manage your AdPilot account
  • Aggregate and display ad campaign metrics across connected platforms
  • Generate AI-powered creatives, recommendations, and analytics
  • Detect and prevent click fraud and suspicious activity
  • Process bKash and other payment transactions
  • Send service updates, alerts, and marketing communications (with consent)
  • Provide customer support and respond to inquiries
  • Comply with legal obligations under Bangladesh law

3. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

  • Service partners: Payment processors (bKash), cloud infrastructure providers, and AI service providers (for creative generation and analytics)
  • Ad platforms: Meta, TikTok, Google, and Twitter as necessary to manage your campaigns through their APIs
  • Legal requirements: When required by Bangladesh law, court order, or government regulation
  • Business transfers: In connection with any merger, acquisition, or sale of company assets
  • With your consent: Any other sharing authorized by you

4. Data Security

We implement industry-standard security measures to protect your data, including:

  • SSL/TLS encryption for all data transmission
  • Bcrypt hashing for passwords (never stored in plain text)
  • OAuth 2.0 for ad platform integrations (we never store your platform passwords)
  • JWT-based authentication with token expiration
  • Role-based access control for data access
  • Regular security audits and vulnerability assessments

While we strive to use commercially acceptable means to protect your information, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Cookies & Tracking

We use cookies and similar technologies to:

  • Maintain your login session
  • Remember your preferences and settings
  • Analyze website usage and improve performance
  • Provide personalized content and recommendations

You can control cookie preferences through your browser settings. Disabling cookies may limit certain features of our services.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Campaign performance data is retained for up to 24 months after campaign completion. You may request deletion of your data at any time by contacting us.

7. Your Rights

You have the right to:

  • Access your personal data we hold
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal obligations)
  • Withdraw consent for marketing communications
  • Export your data in a portable format
  • Disconnect ad platform accounts at any time

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us data, please contact us immediately.

9. International Data Transfers

Our primary operations are in Bangladesh. By using our services, you consent to the transfer of data to Bangladesh and processing in accordance with this policy. Third-party services (cloud providers, AI APIs) may process data in other jurisdictions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

For questions or concerns about this Privacy Policy, contact us:

  • Email: info@qosprey.com
  • WhatsApp: 01635237018
  • Address: Khulna, Bangladesh