Privacy Policy

We only ask for what we need to sell, deliver and support your subscriptions:

• Account and contact details: your name, email address and mobile number. Your password is stored only as a one-way hash; we can never read it.
• Payment details: the payment method you chose (bKash, Nagad, Rocket or bank), the number or account you paid from, the transaction ID and the amount. We never see or store your PIN, card number or bank password.
• Order details: what you bought, and anything a product asks for at checkout, such as the email of the account we should activate.
• Access we deliver to you: logins, licence keys and notes for your plans. These are stored encrypted.
• Messages and reviews: what you send us on WhatsApp, email or Facebook, and reviews or screenshots you share with us.
• Technical information: your IP address and browser type when you sign in, kept with your session so you can see and end it, and to protect accounts from abuse.

• To check your payment, deliver your order and activate your plan.
• To send the emails your order needs: order received, invoice, access details, and reminders before a plan ends.
• To run your account: sign-in, email verification, password reset and order history.
• To answer your questions and fix problems during your plan.
• To prevent fraud, such as reused or fake transaction IDs, and to keep records the law requires.

We do not sell your personal information or share it for advertising. We share only what each of these needs to do its job:

• The service you bought: for personal plans we give the provider (for example the streaming or AI service) the account email you gave us, so the plan can be activated on it.
• Our technology providers: website and server hosting, our database, our email provider, and the messaging tools our staff use to be told about new orders.
• Google: only if you choose "Continue with Google", to confirm who you are.
• Authorities: when the law of Bangladesh requires it, or to protect our customers from fraud.

Reviews you allow us to publish show your first name and the first letter of your last name. We hide phone numbers in screenshots.

We store a few small items in your browser so the website works. We do not use advertising or tracking cookies, and we do not run analytics. If we add them later, they will only load after you allow them.

Google may set its own cookies if you use "Continue with Google". You can change your choice at any time in Cookie settings.

• The whole website uses an encrypted (HTTPS) connection.
• Passwords are hashed, and delivered logins and keys are encrypted in our database.
• Only our staff can see orders, and every change they make is recorded.
• Never send us your bKash or Nagad PIN, or a one-time code. We will never ask for them.

• Orders, payments and invoices: as long as accounting and tax rules require.
• Your account: until you ask us to delete it.
• Staff activity records: 2 years. Sign-in sessions: up to 30 days.

• See and update your name, mobile number and password in your account settings.
• Sign out of all devices from your account at any time.
• Ask us for a copy of your information, to correct it, or to delete your account by writing to support@subora.bd. We keep what the law requires, such as invoices.
• Ask us to remove a review you shared.

Our store is meant for adults. If you are under 18, please ask a parent or guardian to buy for you.

If we change this policy, we will update the date at the top of this page. For any privacy question, contact Subora at support@subora.bd or through our contact page.

Postal address: Nobinogor, Savar, Dhaka, Bangladesh