Privacy Policy
Last updated: 3 October 2026 · Applies to Uddogta Desk (api-wa.uddogtabd.com), the web app and the Android app.
1. Who we are
Uddogta Desk is operated by UddogtaBD (“we”, “us”), CJKS Shopping Complex (5th floor), Nur Ahmed Road, Kazir Dewri, Chattogram, Bangladesh. Contact: uddogtabd@gmail.com.
Uddogta Desk is an internal tool. It has no public sign-up; only staff accounts created by UddogtaBD can log in.
2. Information we process
Customers who message UddogtaBD on WhatsApp
- WhatsApp name, phone number (when WhatsApp shares it) and profile photo.
- Messages and files you send to us (text, photos, videos, voice notes, documents, location, contacts) and our replies.
- Notes our team writes to serve you (for example service needed, quotation, deadline, company name, email or address you gave us).
Our staff (users of Uddogta Desk)
- Name, work email, password (stored only as a secure hash), optional two-factor secret (encrypted), device push token, and an activity log of actions in the system (login, assign, delete, settings) with IP address.
3. Why we use it
- To read and answer customer messages and deliver the services customers ask us for.
- To organise work inside our team (assignment, reminders, reports on reply time).
- To keep the system secure (logins, two-factor authentication, activity log) and to keep backups.
- To send bulk or scheduled WhatsApp messages only to people who are our customers/contacts; anyone can reply STOP and will not receive bulk messages again.
We do not sell personal data, and we do not use it for advertising profiling.
4. Google user data (Google Drive)
Uddogta Desk connects to one Google account owned by UddogtaBD using the Google Drive API. It is used only to upload and manage backup files (database export, configuration and media files of Uddogta Desk) inside a folder named “UddogtaDesk-Backup”, and to delete our own backups older than 14 days.
- We do not read, collect, share or analyse any other files in that Google Drive.
- We do not access the Google accounts of customers or staff.
- Data received from Google APIs is not transferred to third parties, not used for advertising, and not used to train AI models.
Uddogta Desk’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Service providers
- WhatsApp / Meta — messages travel through WhatsApp. Our connection runs on our own server.
- Our server (VPS) — all data is stored on a server rented by UddogtaBD.
- Google Drive — backups of our own data (see section 4).
- AI providers (Anthropic or OpenAI) — only when our team enables AI features, the recent text of a conversation and our business information are sent to suggest replies, summaries or labels. These providers do not use API data to train their models under their business terms.
- Firebase Cloud Messaging and Telegram — to notify our staff about new messages and system problems (a notification may contain a customer name and a short message preview).
6. How long we keep data
Conversations are kept as long as needed for our business relationship and record keeping. Large media files may be removed earlier to save space. Database backups are kept for 14 days. You can ask us to delete your data at any time (section 8).
7. Security
Access is limited to authorised staff with personal accounts; admins can use two-factor authentication; the site uses HTTPS; staff in some teams only see chats assigned to them; actions are recorded in an activity log.
8. Your choices
- Reply STOP on WhatsApp to stop bulk/promotional messages.
- Email uddogtabd@gmail.com to ask for a copy, correction or deletion of your data. We reply within 30 days.
9. Children
Our services are for businesses and adults. We do not knowingly collect data from children.
10. Changes
We may update this policy; the date at the top shows the latest version.