Your privacy, at a glance
In short: Your work belongs on your computer, under your control.
- Your clients, leads, projects, finance, passwords and notes stay locally on your computer. We cannot access that local work data.
- We keep checkout, order, licence activation and support information to deliver and support your purchase.
- Optional Google Drive backups travel directly between your computer and your Drive, never through our servers.
- Payment providers handle full card and wallet details; we do not see or store them.
- There are no analytics, tracking or advertising SDKs inside the app. We do not sell your data.
This policy covers bdi4.com and bdi4 Workspace for Windows, macOS and Linux. bdi4 is a software company registered in Bangladesh, operated by BDI4.COM, Office/Shop No- 16, 17, 18, Fair Plaza Market (Adjacent to Muktijoddha Market), Mirpur-1, Dhaka-1216, Bangladesh, trade licence TRAD/DNCC/009084/2026. Contact: hello@bdi4.com; +8801312026222.
Information we collect
In short: We collect purchase, licence and support information—not your local workspace.
Checkout and orders. We collect your name, email and mobile number. Our order record includes these details, the order number, amount paid, any coupon and payment status. SSLCommerz, bKash, Nagad or the card payment provider processes payment details. We do not receive or store full card or wallet details.
Licence activation and validation. The app sends your licence key and a one-way SHA-256 hashed device ID to our licence server. The hash is built from hardware identifiers such as the OS machine ID, motherboard UUID and CPU ID. Raw identifiers are not sent. The hash links a licence to one device and helps prevent misuse; it is not treated as anonymous simply because it is hashed.
Support. If you contact us, we receive your email address, message and any information or attachments you choose to send. Please do not send passwords, full payment credentials or unrelated client data.
Website. Essential cookies support sessions, security tokens and your language choice.
Local data and online features
In short: Local work runs offline; online features connect only for their stated purpose.
Your clients, leads, projects, team pay, invoices, finance, vault passwords and notes are stored on your own computer. We do not have access to that local work data. You control your device, local files and backups.
Internet connections are used for email through your own SMTP accounts; email address checks through DNS/MX lookups; licence activation and validation; optional cloud lead imports and book downloads from our servers; and optional Google Drive backup and restore. Information needed to perform a selected feature is processed by the relevant service. For example, your SMTP provider handles messages you send, and DNS/MX lookups check domain mail records.
The Google Apps tool can open multiple Google accounts in separate windows. Sign-in happens directly with Google. We do not receive Google passwords or account content from those sessions. This is separate from the optional Drive backup connection.
How and why we use information
In short: We use information to fulfil your order, protect licences and help you.
We use order information to process purchases, deliver licence keys, maintain payment records, handle refunds and answer purchase questions. We use the licence key and hashed device ID only to bind the licence to one device and prevent misuse. Support information helps us answer your request and resolve problems.
Where applicable law requires a legal basis, we rely on performing our agreement with you for purchases and support; legal obligations for required records and lawful requests; and legitimate interests, where recognised by law and balanced against your rights, for licence protection and service security. Optional Google Drive access relies on your authorisation. Where marketing consent is required, we will obtain it; you may withdraw it at any time.
We do not sell personal information. There are no in-app analytics, tracking or advertising SDKs. Google data is not used for marketing or AI/ML training.
Google Drive backup and restore
In short: Your backups go directly to your Drive; our servers never receive them.
Google authorisation is optional and is used only to back up and restore data to your own Google Drive. The only requested API scope is https://www.googleapis.com/auth/drive.file.
This is per-file access, not access to your entire Drive. Technically the scope can cover files created by an app or files a user specifically opens or shares with it. bdi4 Workspace uses it only for backup files it creates itself; it does not access your other Drive files.
The app accesses the contents and file information of those backups only to create, list and restore backups you request. Files travel directly between your computer and your Drive. They never pass through or get stored on our servers.
We do not sell, share with other third parties, use for advertising, or use Google data to train AI/ML models. Google hosts the backups in your account as you request. Humans do not read Google data, except when you ask for support and explicitly authorise access to specific data, or where law requires. This does not give us routine access to your Drive.
Disconnect or revoke. Disconnect Google Drive in the app, or remove the app's access at Google Account permissions. Revoking access stops future access; it does not delete existing backups.
Delete backups. Delete the backup files from Google Drive and, to remove them permanently, empty the relevant items from Drive Trash. Delete downloaded or local copies separately. Contact hello@bdi4.com for other deletion requests. We cannot delete local files or Drive backups on your behalf without access you explicitly authorise.
Service providers and disclosures
In short: Providers receive only the information needed for the service you use.
Payment providers—SSLCommerz, bKash, Nagad and relevant card providers—handle your transaction under their own policies. Our hosting provider supports licensing, optional lead imports, book downloads and website operations. Google provides sign-in and your optional Drive storage. Your chosen SMTP provider handles outgoing email, and DNS services process DNS/MX lookups.
We may disclose information we hold where required by law or a valid legal process. We do not have access to local work data or Drive backups merely because a request is made. Google data remains subject to the Limited Use commitments above.
Cookies
In short: Website cookies are essential; the app has no tracking SDKs.
bdi4.com uses only two essential cookies: a session cookie and an XSRF-TOKEN security cookie. Both expire after 120 minutes of inactivity. Your language choice is kept in the page address (/bn), not in a cookie. We do not use advertising cookies. You can manage cookies in your browser; blocking essential cookies may affect checkout and sessions.
How long information is kept
In short: We retain information for its purpose and required legal periods.
Order and payment records are kept for 6 years to administer purchases and meet applicable accounting, tax and dispute obligations. Licence keys and hashed device IDs are kept for the lifetime of your licence and 3 years thereafter for activation and misuse prevention. Support correspondence is kept for 2 years.
When a retention period ends, we delete or irreversibly anonymise information unless law or an unresolved legal claim requires longer retention. Local work data stays on your computer until you remove it. Drive backups stay under your control in Drive until deleted, subject to Google's retention processes. Disconnecting the app alone does not remove backups.
Security and your choices
In short: Protect your device and backups; no system can promise absolute security.
We aim to protect information we handle with measures appropriate to its sensitivity and the risks involved. No storage or transmission method is completely secure.
Keep your device and operating system protected, restrict access to your files and keep independent backups. Do not share licence keys or passwords. If you suspect a problem involving information we handle, contact hello@bdi4.com.
Your rights and requests
In short: You can ask to access, correct or delete information we hold.
Write to hello@bdi4.com to request access to, correction of or deletion of your personal information, or to raise a privacy concern. Depending on applicable law, you may also be entitled to restrict or object to processing, receive a portable copy or complain to a competent authority. We may ask for proportionate identity verification, but never your password or full payment credentials.
We will respond within the period required by applicable law. Some information may need to be retained for legal obligations or claims; we will explain any lawful limitation. You can opt out of any marketing email by using its unsubscribe option or contacting us. Necessary order, licence and service messages may continue.
You control deletion of local data and Drive backups. For Google access and backup deletion, see the Google Drive section above.
Children
In short: bdi4 Workspace is not intended for anyone under 18.
Our website purchases and app are intended for adults aged 18 or over. We do not knowingly collect personal information from children under 18. If you believe a child has provided information to us, contact hello@bdi4.com so we can investigate and delete it where appropriate, subject to legal duties.
International processing
In short: Third-party services may process information outside Bangladesh.
We operate from Bangladesh. Google, payment providers, your SMTP provider and hosting services may process information in other countries under their own arrangements. Applicable privacy protections may differ. Where we arrange an international transfer, we will use safeguards required by applicable law. Direct Drive backups remain in your own Google account, not our servers.
Changes and contact
In short: We will keep this policy current and tell you about material changes.
We may update this policy as the product or legal requirements change. We will update the date and provide appropriate notice of material changes. Before using Google data for a new purpose, we will disclose the change and obtain any required new consent.
Privacy contact: hello@bdi4.com • +8801312026222
BDI4.COM (bdi4)
Office/Shop No- 16, 17, 18, Fair Plaza Market (Adjacent to Muktijoddha Market), Mirpur-1, Dhaka-1216, Bangladesh
Trade licence: TRAD/DNCC/009084/2026
Questions? Contact us
We’re here to help you understand your purchase, your data and your rights. Contact us →
BDI4.COM · Office/Shop No- 16, 17, 18, Fair Plaza Market (Adjacent to Muktijoddha Market), Mirpur-1, Dhaka-1216, Bangladesh