← Back to BeSendsPrivacy Policy
Last updated 6 September 2026
This policy explains what BeSends, operated by PiTech in Bangladesh, does with personal data. It covers two different groups of people, and it matters which one you are.
If you are our customer — you signed up for a BeSends account — we are the data controller for your account data.
If you are a contact in a customer's list — you received an email, SMS or WhatsApp message sent through BeSends — we are only a data processor. Our customer decides to contact you and is responsible for having your permission. Contact them directly to be removed; we will pass on any request we receive.
1. Data we collect about customers
| What | Why |
|---|---|
| Name, company name, company website, email address | To create and identify your account, and to know what kind of business we are serving |
| Password (stored only as a bcrypt hash) | To authenticate you. We cannot read it. |
| Google account name and email, if you sign in with Google | To let you sign in without a separate password. We request only your basic profile and email. |
| Payment reference — the mobile number you paid from and the transaction ID | To match your payment to your subscription. We never see or store card numbers or bKash PINs. |
| IP address, browser type, timestamps of sign-ins and key actions | Security, abuse investigation and troubleshooting |
2. Data we process on your behalf
When you use BeSends you upload or create:
- contact records — names, email addresses, phone numbers and any custom fields you add;
- message content, templates and campaign settings;
- delivery and engagement logs — sent, delivered, bounced, opened, clicked, unsubscribed, and the failure reason a carrier returned.
We process this only to run the Service for you and to keep it secure. We do not sell it, rent it, or use your contact lists to market anything to anyone. We do not use your contacts or message content to train machine-learning models.
3. Who else touches the data
To deliver a message we must pass the recipient's address and the message content to the network that carries it. Our sub-processors are:
| Who | What they receive | Where |
|---|---|---|
| Our own mail servers | Email address and message content for email campaigns | Our infrastructure — email is sent from servers we operate ourselves, not a third-party ESP |
| A licensed bulk-SMS aggregator in Bangladesh | Recipient mobile number and SMS text | Bangladesh |
| WhatsApp / Meta Platforms | Recipient number and message content for WhatsApp campaigns | Per Meta's own terms and locations |
| Your email address, only if you choose Google sign-in | Per Google's terms | |
| Hostinger | Hosting of the application and database | Data centre in Mumbai, India |
We may also disclose data where the law of Bangladesh requires it, or to establish or defend a legal claim. If that ever happens we will tell you unless we are legally prevented from doing so.
4. Where data is stored
Application data and the database are hosted in a data centre in Mumbai, India. Backups are held in the same region. Email is sent from our own servers rather than a third-party email service.
5. How long we keep it
- Account data — while your account is open, then 90 days after cancellation, then deleted.
- Contacts and campaign data — until you delete them, or 90 days after your account closes.
- Delivery logs — 12 months, so that you can investigate complaints and we can defend deliverability disputes.
- Payment records — as long as tax and accounting law in Bangladesh requires.
6. Security
- All traffic to and from the Service is encrypted with TLS.
- Passwords are stored as bcrypt hashes and are never recoverable in plain text.
- Registration requires email verification before an account can send.
- Outgoing email is authenticated with SPF, DKIM and DMARC from our own sending domain.
- Access to production systems is restricted to named administrators using key-based authentication.
No system is perfectly secure. If a breach affects your data we will notify you without undue delay and tell you what happened and what we are doing about it.
7. Cookies
We set a session cookie to keep you signed in and a CSRF token cookie to protect forms. These are strictly necessary and cannot be turned off while using the application. We do not run third-party advertising or cross-site tracking cookies on this site.
Separately, if you switch on open and click tracking for your own campaigns, BeSends adds a tracking pixel and rewritten links to your messages. That is your decision as the sender, and you are responsible for disclosing it to your recipients.
8. Your rights
You can ask us to give you a copy of your data, correct it, or delete it. Most of this you can do yourself: contacts and campaigns are exportable and deletable from inside the application at any time. For anything else, email hello@pitech.com.bd and we will respond within 30 days.
If you are a recipient rather than a customer, we will forward your request to the customer who holds your details, because they — not we — decide what happens to that list.
9. Children
BeSends is a business tool and is not directed at children. We do not knowingly create accounts for anyone under 18.
10. Changes
If we change this policy materially we will email account holders before the change takes effect. The date at the top always shows the current version.
11. Contact
PiTech — BeSends
119, 9/A Arman Khan Goli, West Dhanmondi, Dhaka 1209, Bangladesh
Phone: +880 1719 679996
Email: hello@pitech.com.bd
Web: besends.com