Privacy Policy

Who is responsible

Zahidul Islam, trading as MehZ Solution (Dhaka, Bangladesh), is responsible for the personal data described here. Contact: [email protected].

What we collect

• Service requests: your name, email, optional WhatsApp number and business name, the plan you chose, your message and, for hosting, when you confirmed the provider disclosure.
• Client dashboard: a password stored only as a one-way hash, and the messages you exchange with us about your requests.
• Partner applications: the details you enter in the partner form.
• Website assistant: the messages you type are sent to our AI provider to generate an answer. We do not save the conversation in our database; it is kept in your browser tab until you close it or press restart.
• Technical data: IP address and request details in server logs and short-lived rate-limit counters, used to keep the site secure.

Why we use it

• To review your request, reply to you and provide the services you agree to (contract).
• To run your client dashboard and send account emails such as password links (contract).
• To protect the website against abuse, spam and attacks (legitimate interest).
• To meet legal and accounting obligations where they apply (legal obligation).

Who processes it for us

We use these providers to run the website. They process data only to provide their service:

• Contabo — server hosting.
• Cloudflare — domain name and network security.
• Google (Gmail) — sending and receiving email.
• OpenRouter and the AI model provider it routes to — answering website-assistant messages.
• WhatsApp (Meta) — only if you choose to message us there.

Cookies

We use one essential cookie to keep you signed in to the client dashboard. We do not use analytics, advertising or tracking cookies.

How long we keep it

We keep request and account data while we are talking to you or working together, and for up to 24 months after our last contact, unless a longer period is required for accounting or legal reasons. Server logs are kept for a short period for security. Sign-in sessions and password links expire automatically.

Your choices and rights

You can ask us to access, correct, export or delete your personal data, or object to how we use it, by emailing [email protected]. Depending on where you live (for example in the EU or UK) you may have further rights, including complaining to your data-protection authority. Some data in backups is removed when those backups expire.

International transfers and security

Our providers may process data outside your country. We choose established providers, use encrypted connections, store passwords only as hashes and limit access to the data we hold. No system is perfectly secure, and we will tell affected people about a serious breach as the law requires.

This website is not intended for children under 16.

Effective 31 October 2026.