Privacy Policy

Last updated 09 Oct 2026

This Privacy Policy explains how Qpay Licences ("we", "us", "our") collects, uses and protects personal data when you visit Qpay Licences, create an account, buy or renew a licence, or join our affiliate program. By using the site you agree to this policy.

1. Who we are

Qpay Licences operates Qpay Licences, where customers buy licences for Qpay Self-Hosted, a payment panel you install on your own server.

2. What we collect

Account details — your name, email address and a securely hashed password.
Licences and domains — the plan you buy, your licence keys, and the website domains you activate each licence on.
Payment records — the amount, date and reference of each licence purchase or renewal. Card or wallet numbers are handled by the payment provider, not stored by us.
Affiliate details — if you join the affiliate program, your referral activity and the payout account (for example a bKash or bank number) you give us so we can pay commissions.
Technical data — IP address, browser type and basic logs, kept for security and to run the service.
Support messages — anything you send us by email or through the site.

3. What we do not collect

Qpay Self-Hosted runs on your own server. The payments your own customers make, their phone numbers, transaction IDs and SMS all stay on your installation and go straight to your own bKash, Nagad, Rocket, Upay or bank accounts. We do not receive or store your customers' payment data. Your Qpay site only contacts this licence server to check that your licence is valid, to fetch updates and the SMS-forwarder app, and — if you turn it on — to share anonymised fraud signals (see below).

4. How we use your data

To create and manage your account and licences, and to validate licences from your installed sites.
To take payment for purchases and renewals, and to send receipts and renewal reminders.
To provide updates, downloads and support.
To run the affiliate program and pay commissions, if you take part.
To keep the service secure, prevent fraud and abuse, and meet our legal obligations.

We rely on performing our contract with you (running your licence), your consent (optional emails), and our legitimate interests (security and improving the service) as the bases for this.

5. Fraud signals

If a site owner enables fraud reporting, Qpay installations may send us non-identifying signals — such as a hashed value of a flagged transaction and the reporting domain — so that repeated abuse can be recognised across sites. These signals are used only to protect merchants from fraud.

6. Sharing your data

We do not sell your personal data. We share it only with: our payment provider, to take payment; email and hosting providers that run the service on our behalf; and authorities where the law requires it. These providers may process data outside Bangladesh; where they do, we take reasonable steps to keep it protected.

7. Cookies

We use a single session cookie to keep you logged in, and — if you arrive through an affiliate link — a cookie that remembers the referral so the right affiliate is credited. We do not use advertising trackers.

8. How long we keep it

We keep account, licence and payment records for as long as you have an account and for as long afterwards as the law requires (for example for tax and accounting). You can ask us to delete your account; we will remove data we are not required to keep.

9. Your rights

You can ask to see, correct, export or delete your personal data, or object to certain uses. Contact us and we will respond. You can also unsubscribe from non-essential emails at any time.

10. Security

Passwords are hashed, licence traffic is signed, and we use HTTPS. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

11. Children

The service is for businesses and is not directed at children under 18.

12. Changes

We may update this policy from time to time. The "last updated" date above shows the current version, and material changes will be notified on this page.

13. Contact

Use the contact details on our site for any questions about this policy.