Privacy Policy

This policy explains what personal data Revoltify Technologies collects when you use UddoktaPay or Paymently, why we collect it, and what rights you have. We are the data controller for that data.

1. Self-hosted vs hosted — an important difference

If you run the self-hosted licence, your merchants' and customers' payment data lives on your server, inside infrastructure you control. We do not receive it. For that data you are the controller, and this policy covers only the limited information we hold about you as a licence holder.

If you use the hosted dashboard, we process the operational data described below on your behalf so we can run the service for you.

2. What we collect

• Account information — name, email address, business name, and the credentials used to sign in.
• Billing information — plan, billing cycle, invoices, and payment records. Card details, where applicable, are handled by our payment provider and are not stored by us.
• Licence information — the domain or installation a self-hosted licence is activated against, for the purpose of validating it.
• Support information — the contents of tickets you open, including anything you choose to attach.
• Technical information — IP address, browser and device type, and log data such as sign-in attempts and errors.
• Hosted operational data — for hosted accounts, the payment, invoice, and customer records created in your dashboard.

3. Why we use it

• to provide, operate, and maintain the service;
• to validate licences and prevent unauthorised use;
• to take payment and issue invoices;
• to answer support tickets;
• to secure the service, investigate abuse, and detect fraud;
• to send service notices such as security alerts, billing notices, and material changes;
• to comply with legal obligations.

We do not sell your personal data, and we do not share it for advertising.

4. Who we share it with

We share data only where necessary, with:

• Infrastructure and hosting providers who run our servers;
• Payment providers who process your subscription or licence payment;
• Communication providers used to deliver email and support;
• Authorities, where we are legally required to do so.

These providers act on our instructions and are bound to protect the data they handle for us.

5. Retention

We keep account, licence, and billing records for as long as your account is active and afterwards for as long as we need them for legal, tax, and accounting purposes. Support tickets are kept so we have a history of your issues. Logs are kept for a limited period for security and diagnostics.

6. Security

We use encryption in transit, access controls, and two-factor authentication and passkeys on the dashboard. No system is perfectly secure, but we work to protect your data and will notify you of a breach affecting you where we are required to.

7. Your rights

You may ask us to access, correct, export, or delete the personal data we hold about you, and you may object to certain processing. Open a support ticket and we will respond. Some data must be retained where the law requires it, for example accounting records.

If you run the self-hosted licence and one of your customers asks about their data, that request is for you to handle, since the data is on your server.

8. Children

The service is intended for businesses and is not directed at children. We do not knowingly collect data from children.

9. International transfers

Our providers may process data outside Bangladesh. Where that happens we take reasonable steps to ensure the data remains protected.

10. Changes

We may update this policy. The date at the top of this page shows the latest revision, and material changes will be notified through the dashboard or by email.

11. Contact

To exercise any of the rights above, or for any other privacy question, open a support ticket or write to [email protected]. We will respond within a reasonable period.