গোপনীয়তা নীতি (Privacy Policy) — Amar Sonod

This Privacy Policy applies to the digital service platform Amar Sonod available at www.amarsonod.com and related online services.

Before using Amar Sonod (“আমার সনদ”), please confirm that you agree to this Privacy Policy and our Terms. If we update this policy, we will publish the changes on this website.

1. Personal information we collect

When you use Amar Sonod services, we may collect name, National ID (NID) / birth registration number, permanent and present address, mobile number, email, IP address, and other information required to process certificate applications and local-government services.

We do not sell personal information to unauthorized third parties — including for newsletter subscriptions.

2. Google Sheets and Google Drive (optional office feature)

Authorized office staff may connect a Google account to Amar Sonod to use Google Sheets and Google Drive. This feature is optional and is not required for citizens to apply for certificates. When enabled by the office:

• Access: Amar Sonod accesses Google Sheets and Drive only after the office staff grants consent through Google OAuth.
• Use — Sheets: Certificate application records (for example track ID, certificate type, citizen name, status, and approval fee fields when available) may be written or updated in a Google Sheet owned or controlled by that office Google account.
• Use — Drive: Approved certificate PDF copies may be uploaded to a Google Drive folder that Amar Sonod creates or that the office selects. With drive.file, Amar Sonod does not request access to the user's entire Drive.
• Store: OAuth tokens needed to call Google APIs on behalf of the connected office are stored securely on Amar Sonod servers for that office geography. Spreadsheet and folder IDs are stored so sync can continue. Certificate content written to Sheets/Drive remains in the office's Google account.
• Share: We do not sell Google user data, use it for advertising, or share it with unrelated third parties. Google data is used only to provide the Sheets register and Drive PDF features described in this policy and on /google-workspace.

2.1 Minimum Google OAuth scopes

Amar Sonod requests only the following scopes (the minimum needed):

• https://www.googleapis.com/auth/spreadsheets — create/update the office certificate spreadsheet and append/update rows.
• https://www.googleapis.com/auth/drive.file — access only files/folders created by Amar Sonod or selected by the user; upload approved PDFs.
• https://www.googleapis.com/auth/userinfo.email — display the connected Google account email in Settings.
• openid — standard OpenID Connect for the OAuth sign-in flow.

2.2 Limited Use and user control

Amar Sonod's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Office staff can disconnect Google access at any time from Amar Sonod Settings → Google Sheets ও Drive, or revoke access from their Google Account permissions page. After disconnect, Amar Sonod stops calling Google APIs for that office; existing rows/files already saved in the office Google account remain under the office's Google control unless the office deletes them.

3. Browsing and server logs

You can browse public pages on www.amarsonod.com without providing personal details. Our servers may automatically store IP address, browser type, session timing, and search keywords to improve performance and service quality.

4. Cookies

When you use Amar Sonod, we may place cookies on your device to improve service quality, manage sessions, and understand usage preferences. You can disable cookies in your browser settings, though some features may not work correctly.

5. Analytics

Amar Sonod may use secure analytics to measure aggregated platform performance. These reports do not identify a single person.