Privacy policy

Who is responsible

Amader Cloud Limited, Level 5, House 42, Road 11, Block C, Banani, Dhaka 1213, Bangladesh, runs Amader Cloud. We have two roles under Bangladesh's Personal Data Protection Act, 2026:

For you (visitors, business owners, agencies, investors who write to us), we decide how your information is used. This policy covers that.
For your customers (the people who buy from, book with or pay fees through an app you build), you decide. We process their information on your behalf, only to run your app, under the data-processing terms in our Terms of service.

Questions about privacy go to privacy@amader.cloud.

What we collect

From this website's forms: your name, business or firm, email, phone or WhatsApp number, and your message.
Your account: name, phone, email, business name and the subdomain you choose. If you apply for the verified-business badge, the trade licence or other document you send us.
What you build: the requests you type or speak to the builder, the files and photos you upload, and the app our agent builds from them, with every version.
Billing: your plan, amounts, dates and bKash or Nagad transaction IDs. Never your PIN or OTP.
Support: messages you send us by email, WhatsApp or the builder.
Logs: IP address, device and browser type, pages and actions in the builder, and your app's error and payment-callback logs.
Safety review records: the results of the automated and human checks run on your app before and after it is published.

How we use it

To provide the service you signed up for: building, previewing, publishing and hosting your app, sending its SMS, booking its deliveries, and support.
To build your app: your requests, files and app are sent to the service our agent runs on, to plan, build and change the app. See Our agent and your data.
To keep people safe: reviewing apps against impersonation, scams and prohibited goods, and investigating reports.
To meet legal duties: tax and accounting records, and lawful requests from authorities.
To send you product news, only if you opt in. You can opt out at any time.

We don't sell personal information and we don't use it for advertising.

Our agent and your data

Our agent runs on Anthropic's commercial API. Under Anthropic's commercial terms, Anthropic does not train on what we send. We send only what the task needs: your request, the parts of your app being changed, and the files you attached.

Don't put passwords, PINs, national ID numbers or other people's private details into a build request. The builder doesn't need them.

Only the providers we need, each for its own part of the service:

Anthropic, whose API our agent runs on, for building and changing apps.
Our cloud hosting provider, for running apps, the builder and backups.
The payment partner you connect, for your merchant onboarding and your customers' payments. Card numbers and wallet PINs go to the partner, never to us.
SMS gateways and couriers, for the messages your app sends and the deliveries you book: only the phone number, name and address each one needs.
Formboost, which receives this website's contact and deck-request forms and forwards them to us by email.
Google Fonts, which serves this website's typefaces and so receives your browser's IP address.
Authorities, only when Bangladeshi law requires it. Where the law allows, we tell you first.

Where it is stored

Apps, the builder and backups run in Singapore, with a copy of restricted data kept in Bangladesh where the law requires it. Our agent's requests are processed by Anthropic, in the United States. Transfers outside Bangladesh follow the Personal Data Protection Act, 2026 and its rules on restricted data.

How long we keep it

Account and app data: while your account is open. When you close it, we delete your apps and their data within 30 days, after giving you time to export.
Billing records: as long as tax and accounting law requires.
Website form messages: 12 months, unless you become a customer.
Logs: 90 days. Safety-review records: 2 years.
Backups: roll over within 35 days.

Your customers' data

The orders, bookings, fee records and contact details your app collects belong to you, and you are responsible to your customers for them. We store, back up and process them only to run your app, keep them separate from other owners' data, and give you an export at any time.

If your app collects information about children, such as students in a coaching centre, you need their guardian's consent. Our fee-collection template sends receipts to the guardian for that reason.

Security

Data is encrypted in transit and at rest. Staff access to production is limited, needs two-factor sign-in, and is logged. If a breach is likely to harm you, we will tell the Authority and the people affected, as the Act requires.

Your rights

Under the Personal Data Protection Act, 2026, you can ask us to:

give you a copy of your information, in a format you can take elsewhere;
correct information that is wrong or out of date;
delete your information, unless the law requires us to keep it;
withdraw consent you gave, for example for product news.

Write to privacy@amader.cloud. We reply within 30 days. If you are not satisfied, you can complain to the National Data Management Authority.

Cookies and this website

This website sets no cookies and runs no analytics. It remembers your light or dark theme choice in your own browser. The builder uses a sign-in cookie, and nothing else.

Changes

We will post changes here and update the date at the top. If a change affects how we use information you already gave us, we will tell you by email first.