Privacy Policy

Ei Privacy Policy te bola hoy BPM project (“we”) kivabe bpm CLI, BPM registry, amader website, ebong related services (mil-e “Services”) use korar somoy data collect, use, o share kore.

Effective date: 10 September, 2025

1) Scope & Principles

Services safe o reliable vabe deyar jonno jotota dorkar totota data-i collect kori.
Amra personal data sell kori na.
Registry te publish kora public act: apni je metadata publish korben seta onnoder kache dekhate pare.

2) Information We Collect

Telemetry niye: BPM CLI by default kono usage telemetry pathay na. Future e jodi optional diagnostics ashe, seta opt-in hobe ebong CLI help-e documented thakbe. Local settings apni iccha moto change korte parben.

Account data: nam, username, email, auth token, settings (account thakle).
Registry & package data: package name, version, manifest, integrity hash, readme/metadata, publisher ID.
Service logs: IP, user agent, request path, timestamp, status code — security/abuse prevention/reliability jonno.
Website data: basic analytics (page view, referrer), cookie preferences (Section 7 dekhun).
Support communications: amader kache pathano email/message (support/security/legal).
Billing data (future paid features thakle): payment provider-er transaction detail; full card number na.

3) How We Use Information

Services deya: account manage, package publish/distribute, search, docs.
Security: abuse/fraud detect, spam/malware prevent, incident investigate.
Reliability/performance improve kora aggregate analytics diye.
Important update/security notice niye communication.
Ainer dabi o Terms enforce kora.

4) Legal Bases (where applicable)

Contract: apnar chaoya service deya.
Legitimate interests: service secure, maintain, improve kora.
Consent: optional feature (diagnostics) ba marketing er jonno.
Legal obligations: projojjo ainer onurodh mana.

5) How We Share Information

Amra personal data sell kori na.

Public registry data: publish kora package name/version/metadata onno ra dekhte parbe, search engine index o korte pare.
Service providers (processors): hosting, email, analytics, payment (thakle) — contract diye protected.
Legal & safety: ainer proyojone ba user/service er nirapotta rokkhai.
Mergers/organizational changes: governance change hole data transfer hote pare; feasible hole notice dibo.

6) Data Retention

Account data: account active thakle thakbe; delete korle reasonable somoyer moddhe delete/anon (legal/ops chai).
Service logs: usually 90 din; security log up to 12 months.
Published packages & metadata: registry integrity o history-r jonno rakhte hoy.
Backups: limited time rakhha, pore rotate (usually 30–90 din).

7) Cookies & Similar Technologies

Essential: login, CSRF, security.
Preference: theme, language, etc.
Analytics: aggregate usage bujhbo; browser settings/Do Not Track diye opt-out kora jabe (technicaly possible hole).

8) Your Rights & Choices

EEA/UK/California moto region-e aro rights thakte pare (portability, restriction, objection). Identity verify o law অনুযায়ী valid request honor kora hobe.

Account info access/correct/delete (registry integrity maintain kore).
Project data local export/backup; email-e account data-r copy chaite paren.
Non-essential email o optional diagnostics (ashe jodi) theke opt-out.
Registry token revoke korun, local config (e.g., ~/.bpmrc.json) e thaka credentials rotate korun.

9) International Transfers

Data Asia/EU/US shoho onno desher server/provider e process hote pare. Proyojone standard contractual clauses moto safeguards use kora hoy.

10) Security

Access control, in-transit encryption, least-privilege, monitoring use kori — kintu kono system 100% secure na. Vul pelen? [email protected] e janan.

11) Children’s Privacy

Services 13 bochorer niche der jonno noy. Choto der data pele amader janan, amra remove korar byabostha nebo.

12) Third-Party Links & Packages

Website/registry te third-party link ba independent author-er package thakte pare. Oder privacy policy alada — use korar age check korun.

13) Changes to this Policy

Somoy moto policy update hote pare. Boro poriborton hole reasonable notice debo (ei page/Services e). Change er pore use korle tar mane apni accept koresen.