IMB

Privacy Policy

Last updated: 7 October 2026

1. What We Collect

  • Mobile number, verified by OTP and required for every account. If you set a password it is stored only as a hash.
  • If you sign in with Google or link Gmail: your Google account email and name.
  • The biodata you enter in the application form: age, height, education, occupation, address, family information, religious practice, preferences, National ID (NID) number, and for women, the guardian's relationship and phone number.
  • Documents: NID scans, CV, photo (men only), and where relevant divorce papers or the husband's death certificate.
  • Sign-in records for account security: IP address, approximate city/country, browser and device type, and time. These are used to spot suspicious sign-ins and block them if needed.
  • Payment details: amount, service, transaction ID and result. Card numbers, bKash/Nagad PINs and account details are taken by the payment gateway and never reach our servers.
  • Google Analytics is used on the public pages only, to understand how many people visit (which page, approximate country/city, device type). Members' and staff pages — dashboard, biodata, payments — are never measured, and your name, phone or biodata are never sent to Google. There is no advertising tracking.

2. Where and How Data Is Stored

Biodata and account data are stored in Google Firebase (Firestore, Delhi region, India); security rules let each person read only the parts they are allowed to. Documents and photos are stored privately on Cloudinary with no public links — to view one, our server creates a signed link valid for a short time, only for someone permitted to see it. The website runs on Vercel, email is sent through Hostinger, SMS (OTP) through a Bangladeshi SMS gateway, and payments through SSLCommerz. Visitor statistics for the public pages go to Google Analytics. Each receives only what it needs to provide its service; we never sell or rent anyone's data.

3. Who Can See What

  • Your full profile and documents: you, and our admin and user manager team. Staff must enter an authenticator-app code in addition to their password at every sign-in, and their actions are logged.
  • Women's biodata: visible only to verified male members — without name, phone numbers, email, NID or full address.
  • Contact number: when a verified male member pays the number-collection fee, he sees that biodata's contact number as soon as the payment succeeds, and his CV is sent to her at the same time.
  • Men's CV and photo: visible only to the women whose number he has collected, and to our team.
  • Biodata PDF: the PDF members can download for sharing leaves out NID, phone numbers, email, date of birth and full address.
  • Information received about another member may not be used or published outside marriage discussions (see the Terms).

4. How Long We Keep Data

Applicant data (including rejected applications) is normally kept for re-applications and verification records. When a biodata is paused or the member is married, it is no longer shown to anyone new; only those who already collected the number can still see it. Payment records are kept for accounting. Sign-in records are used only for security. You can ask for deletion at any time — see Section 6 below.

5. Email, SMS, Payments & Donations

We send SMS only for OTP codes, and email only for receipts, application decisions, bookings and a one-time welcome — never marketing email. Payments are made on SSLCommerz's secure gateway (card, bKash, Nagad, Rocket or net banking); we keep only the result. Donations can be anonymous; if you give your name or contact it is used only for the receipt and is not published without your consent.

6. Your Rights

You can view your biodata at any time and ask us to correct anything wrong. Request deletion of your account, profile and documents at /account/delete-request. Our team checks each request by hand and removes the documents stored on Cloudinary as well as the database records. Payment records may be kept where the law or accounting requires.

7. Contact & Changes

Questions about this policy or your data can be sent through our Contact page. Any change to this policy will be published on this page with the date it was updated.