chithi.me

Policy

Privacy Policy

Last updated

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

Interpretation and Definitions

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Application refers to Chithi.me: anonymous letters, the software program provided by the Company.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Team Chithi.me.
  • Country refers to: Bangladesh
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the Application.
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

  • Username
  • Email address (optional)
  • Password

Letter Metadata and Hint Credits

When somebody writes a letter through Chithi.me, we record technical information about the connection it was written from: the device name the browser reports, the screen size, the browser user agent, and the IP address. This is recorded for every letter, whether or not anybody ever pays to see it.

  • The person a letter was sent to can buy hint credits and spend one to see the sender's device, country, area, network operator, whether a VPN was detected, and the IP address. The area is looked up from the IP address by third-party geolocation services and is often approximate; several services are consulted and every distinct answer is shown.
  • They are also shown a short sender code: the last six characters of the browser fingerprint already recorded with the letter for blocking. It is not a name and cannot be turned back into one. What it does allow is comparison — two letters showing the same code were written from the same browser.
  • Nothing else about the sender is revealed. We do not disclose a sender's account, name, email address or phone number to a recipient, and hint credits do not change that.
  • Buying hint credits requires a mobile number and optionally an email address, both stored encrypted. Credits are addressed to a Chithi.me username and can be bought by somebody other than the person who receives them.
  • If you have opted in, we may email you about your letters and hint credits. Every one of those emails carries a link to stop them.

Marketplace Orders

When you buy from the Chithi.me Marketplace (no account is needed), we collect what the order requires: your name, email address, phone number, and — for direct orders or accepted gifts — the delivery address. This information is stored encrypted.

  • We share with the partner shop and its courier only what is needed to prepare and deliver the order.
  • For an anonymous gift, the sender's identity is never shared with the recipient or the shop, and the recipient's address is never shared with the sender.
  • Payments are processed by SSLCOMMERZ; we never see or store your card or wallet details.
  • The versions of the policies you accepted at checkout are recorded with your order.
  • A recipient may optionally save a delivery address for future gifts, and can delete it at any time in the app.
  • Seller applications are retained for up to one year, then reduced to a minimal record.

Google Ads Disclosure

Our Service uses Google Ads, which may collect additional user data. We want to explicitly clarify that we are not responsible for the data collection practices of Google Ads. Users should refer to Google's privacy policy for detailed information about data collection, tracking, and usage by Google Ads. We have no control over or responsibility for the data collected by Google Ads through our Service.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To create and manage Your Account
  • To provide and maintain our Service
  • To authenticate and secure Your account
  • To contact You regarding account-related matters

We may share Your personal information in the following situations:

  • With Your consent
  • To comply with legal obligations

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary to provide the Service and maintain Your account. We will delete Your account and associated data upon Your request or if the account becomes inactive for an extended period.

Security of Your Personal Data

The security of Your Personal Data is important to Us. We implement industry-standard security measures to protect Your information, including:

  • Encrypted password storage
  • Secure authentication mechanisms
  • Protection against unauthorized access

Your Data Rights

You have the right to:

  • Access Your personal information
  • Request correction of Your personal information
  • Request deletion of Your account and associated data
  • Opt out of optional data collection (such as email)

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, You can contact us: