Privacy Policy
Last updated: February 11, 2026
At Bhara.com (ভাড়া.কম), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our rental property platform.
Quick Summary
- •We collect only necessary information to provide our rental listing services
- •Your phone number and contact details are only shared when you explicitly request contact with a property owner
- •We use industry-standard security measures to protect your data
- •You have full control over your account and can delete it anytime
- •We never sell your personal information to third parties
1. Information We Collect
1.1 Information You Provide Directly
When you create an account or use our services, we collect:
- Account Information: Name, email address, phone number (+880 Bangladesh mobile numbers)
- Profile Information: User type (tenant/owner), profile photo (optional), preferences
- Listing Information: Property details, location, rent amount, photos, descriptions, amenities
- Communication Data: Messages, contact requests, support inquiries
- Payment Information: Subscription plan, transaction history (payment card details are processed by SSLCommerz and not stored by us)
- Verification Data: Phone verification status, email verification status
1.2 Information Collected Automatically
When you use Bhara.com, we automatically collect:
- Device Information: IP address, browser type, device type, operating system
- Usage Data: Pages viewed, search queries, listing views, time spent on site
- Location Data: Approximate location based on IP address (not GPS tracking), district and area selection for property searches
- Cookies and Tracking: Session cookies for authentication, preference cookies for user settings
1.3 Information from Third Parties
- Google OAuth: If you sign in with Google, we receive your name, email, and profile photo
- Payment Provider (SSLCommerz): Payment confirmation, transaction status, payment method (card brand)
- SMS Provider: Delivery status for OTP verification messages
2. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To create and manage your account, display your listings, facilitate connections between tenants and property owners
- Communication: To send OTP verification codes, listing status updates, payment confirmations, important service announcements
- Payment Processing: To process subscription payments, featured listing purchases, and manage refunds
- Security & Fraud Prevention: To verify phone numbers, detect and prevent spam, abuse, and fraudulent activities
- Service Improvement: To analyze usage patterns, improve search functionality, enhance user experience
- Customer Support: To respond to your inquiries, resolve disputes, provide technical assistance
- Legal Compliance: To comply with Bangladesh laws, respond to legal requests, enforce our Terms of Service
Important: We will never use your phone number or email for marketing purposes without your explicit consent. You can opt out of promotional communications at any time.
3. How We Share Your Information
3.1 Information Visible to Other Users
- Public Listings: Property details, photos, location (district/area), rent amount, amenities
- Profile Information: Your name and user type (tenant/owner) are visible when you post a listing
- Contact Information: Your phone number is ONLY shared with users who request contact through our platform (subject to subscription limits)
3.2 Service Providers
We share information with trusted third-party service providers:
- Cloudinary: Image hosting and delivery
- SSLCommerz: Payment processing (they handle card details securely)
- SMS Gateway (SSL Wireless/BulkSMSBD): OTP delivery via SMS
- Email Service (Gmail/Resend/SendGrid): Transactional emails (welcome, verification, notifications)
- MongoDB Atlas: Database hosting (data encrypted at rest)
- Vercel: Website hosting and infrastructure
3.3 Legal Requirements
We may disclose your information if required by Bangladesh law, court orders, government requests, or to protect our rights, safety, or property.
3.4 What We Never Share
We will NEVER:
- Sell your personal information to third parties
- Share your phone number with advertisers or marketers
- Use your data for purposes unrelated to our rental platform
4. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: All data transmission uses HTTPS/TLS encryption, passwords are hashed with bcrypt
- Authentication: Secure login with NextAuth.js, OTP verification for phone numbers, session management with JWT tokens
- Access Control: Role-based permissions (admin/owner/tenant), database access restricted to authorized personnel
- Rate Limiting: Protection against brute force attacks, OTP spam prevention (5 requests/hour per phone, 60s cooldown)
- Payment Security: PCI-compliant payment processing via SSLCommerz (we never store card details)
- Monitoring: Regular security audits, automated backups, intrusion detection
Note: While we take extensive measures to secure your data, no internet transmission or storage system is 100% secure. We encourage you to use strong passwords and enable phone verification for added security.
5. Your Rights and Choices
You have the following rights regarding your personal data:
5.1 Access and Update
You can access and update your account information anytime through your Settings page. This includes your name, phone number, email, profile photo, and preferences.
5.2 Delete Your Account
You can permanently delete your account from Settings → Danger Zone. This will remove:
- Your profile and account information
- Your listings (they will become inactive and eventually deleted)
- Your favorites and contact history
- Your payment history (retained for legal compliance for 7 years)
5.3 Communication Preferences
You can control notification settings in your Settings:
- Email Notifications: Welcome emails, listing updates, payment confirmations
- SMS Notifications: OTP codes, urgent alerts (available for premium plans)
- Promotional Communications: Opt-in required (we don't send marketing emails by default)
5.4 Data Portability
You can request a copy of your data by contacting us at privacy@bhara.com. We will provide your data in a structured, machine-readable format (JSON/CSV) within 30 days.
5.5 Object to Processing
You have the right to object to certain data processing activities. Contact us if you wish to restrict how we use your data.
6. Data Retention
We retain your data for the following periods:
- Account Data: Retained while your account is active, deleted 90 days after account deletion request
- Listings: Active listings retained indefinitely, inactive/deleted listings retained for 30 days then permanently deleted
- Transaction Records: Retained for 7 years for legal compliance and tax purposes
- Communication Logs: Contact requests and messages retained for 2 years
- OTP Codes: Automatically deleted after 24 hours (stored in database for verification)
- Cookies: Session cookies expire after 365 days, preference cookies retained until manually cleared
7. Children's Privacy
Bhara.com is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you are under 18, please do not use our services or provide any information. If we discover that a child under 18 has provided us with personal information, we will delete it immediately.
8. Cookies and Tracking Technologies
We use cookies and similar technologies for:
8.1 Essential Cookies
Required for basic website functionality: authentication, session management, security. These cannot be disabled.
8.2 Preference Cookies
Store your settings and preferences: language, location, search filters, view mode (grid/list/map).
8.3 Analytics (Future)
We currently do not use third-party analytics (no Google Analytics). If we add analytics in the future, we will update this policy and request consent.
8.4 Managing Cookies
You can control cookies through your browser settings. Disabling cookies may affect website functionality. Learn how to manage cookies in Chrome, Firefox, Safari, Edge.
9. International Data Transfers
Bhara.com is based in Bangladesh and primarily serves Bangladesh users. Your data is stored on servers located in:
- MongoDB Atlas: Asia-Pacific (Singapore) region with encryption
- Cloudinary: Global CDN with servers in Asia
- Vercel: Asia-Pacific edge network
We ensure that all service providers comply with international data protection standards and use encryption for data in transit and at rest.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will:
- Update the "Last updated" date at the top of this page
- Notify you via email or in-app notification for significant changes
- Archive previous versions for your reference
- Provide 30 days notice before material changes take effect
Your continued use of Bhara.com after changes indicates acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Phone
+880 1572-246388Address
Bhara.com
Dhaka, Bangladesh
Response Time: We aim to respond to all privacy inquiries within 7 business days.
12. Legal Compliance
Bhara.com complies with:
- Bangladesh Digital Security Act, 2018: Data protection and cybersecurity requirements
- Bangladesh Telecommunication Regulation Act, 2001: Telecommunications and SMS services
- International Best Practices: GDPR-inspired principles for transparency, consent, and user rights