Privacy Policy
How Turja Talukder collects, uses, shares and protects personal data on this website and in the Money Manager product.
1. Scope
This policy explains how personal data is handled when you visit turjadev.it.com, contact us through the site, subscribe to updates, comment on the blog, or use the Money Manager application (the dashboard available from this website). It applies to the website and the product; it does not apply to third-party sites we link to.
2. Who is responsible
The data controller is Turja Talukder, an independent contractor operating as a sole proprietor, Rangamati, Chattogram Division, Bangladesh. For any privacy question, request or complaint, contact turjo_t@yahoo.com. We respond within one business day.
3. Data we collect
| Category | What it includes | Source |
|---|---|---|
| Account data | Name, email address, hashed password, optional profile details (photo, location, preferences), subscription status | You, when you register in the product |
| Contact / enquiry data | Name, email, company, role, budget range, timeline, project description and any attachments you send | You, via the contact form or email |
| Content data | Blog comments (and any name/email you provide with them), replies | You, when you comment |
| Usage and analytics data | Pages viewed, referring URL, session identifier, timestamps, approximate location derived from IP address, browser/device type, and — if you are signed in — your user ID | Automatically, only after you accept analytics cookies |
| Consent records | Your cookie choice, the time you made it, your IP address and user ID (if signed in) | Automatically, to evidence consent |
| Product data | Expenses, goals, routines, calendar events, notes and any files you upload to be processed by the assistant | You, when you use the Money Manager application |
| Billing data | Subscription plan, invoices and payment status. Card details are handled by the payment processor and never stored by us | You, when you subscribe |
| Push notification data | Web-push subscription endpoint and device keys, if you enable reminders | Your browser, with your permission |
We do not intentionally collect special-category data (health, biometric, political, religious or similar). Please do not send us such data through the contact form.
4. Purposes and lawful bases
- To answer your enquiry and prepare proposals — lawful basis: steps taken at your request before entering a contract, and our legitimate interest in responding to business enquiries.
- To provide and operate the product (account, personal finance records, reminders, subscriptions, support) — lawful basis: performance of a contract with you.
- To operate and secure the website (rate limiting, abuse and fraud prevention, error monitoring, backups) — lawful basis: our legitimate interest in keeping the service secure and available.
- To understand how the site is used (aggregated visit statistics) — lawful basis: your consent, collected through the cookie banner.
- To send product or occasional project updates — lawful basis: your consent, or our legitimate interest in communicating with existing clients; you can opt out at any time.
- To comply with legal, tax and accounting obligations — lawful basis: compliance with a legal obligation.
Where we rely on consent (analytics cookies, optional marketing email, push notifications), you can withdraw it at any time by clearing your choice in the cookie banner footer link, using the unsubscribe link, or disabling notifications in your browser. Withdrawal does not affect processing carried out before that point.
5. Cookies and local storage
We use a small number of strictly necessary cookies and, only with your consent, analytics tracking. We do not use advertising or cross-site tracking cookies, and we do not sell personal data. A full inventory with names, purposes and lifetimes is in our Cookie Policy.
6. Service providers we share data with
We do not sell personal data and we do not share it for advertising. We use the following processors, each bound to process data only on our instructions:
| Provider | Purpose | Data involved |
|---|---|---|
| MongoDB Atlas | Cloud database hosting | All data stored by the website and product |
| Render | Backend application hosting | Data in transit and in logs |
| Netlify | Website hosting, CDN and server logs | IP address, request metadata |
| Web3Forms | Contact form delivery | Name, email and message you submit |
| Resend and Google (Gmail SMTP) | Transactional email (verification, notifications, replies) | Name, email address, message content |
| Stripe | Subscription billing and invoices | Billing details and payment status |
| Google (OAuth sign-in) and Google Fonts | Optional sign-in with Google; font delivery | Account identifiers; IP address for font requests |
| AI providers (DeepSeek / OpenAI) | Assistant and document-analysis features you explicitly invoke | The text or document content you submit to the assistant |
| ip-api (IP geolocation) | Country and city shown on the visitor analytics screen. For consent records your address is read from the request itself, not looked up through a third party. Visitor rows are deleted automatically after 180 days. | IP address, country and city |
| Dropbox Sign | Electronic signature of agreements and contracts sent through the client portal | Client name and email address, and the documents sent for signature |
| Vercel (avatar service), cdnjs (Font Awesome) | Third-party content embedded on pages | IP address, request metadata |
We may also disclose data where required by law, to enforce our Terms of Service, or to protect the rights and safety of users. If ownership of the business changes, data may transfer as part of that transaction, and we will notify you on this page.
7. International transfers
We operate from Bangladesh and use providers whose servers are mainly located in the United States and the European Union. Where personal data of individuals in the EEA, UK or Switzerland is transferred outside those regions, we rely on appropriate safeguards — the European Commission's Standard Contractual Clauses and, where applicable, the UK Addendum — under our agreements with the processors listed above.
8. How long we keep data
| Data | Retention period |
|---|---|
| Contact form enquiries and proposals | 24 months after the last message |
| Visit and analytics records | 14 months |
| Cookie consent records | 36 months |
| Account and product data | until account deletion, then 30 days (backups) |
| Invoices and tax records | As required by applicable accounting law (up to 7 years) |
When a retention period ends we delete or irreversibly anonymise the data. If you delete your account, we remove your product data except where we must keep records for legal or accounting reasons.
9. How we protect data
- All traffic to this site and the product is encrypted with TLS (HTTPS).
- Passwords are stored only as salted hashes; sessions use HTTP-only, secure cookies.
- Access to production systems and databases is limited to authorised personnel and protected by multi-factor authentication where the provider supports it.
- The contact endpoint is rate-limited and inputs are validated and sanitised server-side to reduce spam and injection attacks.
- Databases are backed up by our hosting provider; backups are used only for recovery.
No method of transmission or storage is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected individuals without undue delay where the law requires it. Report a suspected vulnerability to turjo_t@yahoo.com.
10. Your privacy rights
Depending on where you live, you have some or all of the following rights:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete data we no longer need.
- Restriction and objection — ask us to limit or stop certain processing, including processing based on legitimate interests.
- Portability — receive data you provided in a structured, machine-readable format.
- Withdraw consent — at any time, where processing is based on consent.
- Complain — to your local data protection authority. In the UK, that is the ICO; in the EU, your national authority.
To exercise any right, email turjo_t@yahoo.com with enough detail for us to identify you. We respond within 30 days and may ask for proof of identity to protect your data. There is no charge unless a request is manifestly unfounded or repetitive.
11. US state privacy rights
If you are a resident of California, Colorado, Connecticut, Virginia, Utah or another state with a comprehensive privacy law, you have the right to know what personal information we collect and how it is used, to request deletion or correction, to obtain a portable copy, and to opt out of targeted advertising, sale or profiling.
We do not sell or share personal information for cross-context behavioural advertising, and we do not carry out automated decision-making with legal or similarly significant effects. We will not discriminate against you for exercising your rights. To make a request, contact turjo_t@yahoo.com.
12. AI-assisted features
The Money Manager application includes optional AI features (for example document analysis and a financial assistant). When you use them, the content you submit is sent to the AI provider listed in section 6 so that it can generate a response. Do not submit confidential third-party data or special-category data to these features. Content is used to produce your result and is not used by us to train models. You can use every other part of the product without using AI features.
13. Children
This website and the product are intended for adults and business users. They are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.
14. Changes to this policy
We may update this policy to reflect changes in our services, providers or the law. The "Last updated" date at the top always shows the current version, and material changes will be highlighted on this page. Where the law requires it, we will ask for your consent again.
15. Contact us
Turja Talukder
Rangamati, Chattogram Division, Bangladesh
Email: turjo_t@yahoo.com
Phone: +880 1793-771091
See also our Terms of Service, Cookie Policy and Accessibility Statement.
Plain-language summary (not legally binding): we collect what we need to reply to you, run the product and keep the site secure; analytics only run if you accept them; we never sell your data; you can ask us for a copy or deletion at any time.