Your details, handled with care.

Who we are

Nokshi Labs is a software studio based in Bangladesh. We build software (Mehman, Safar and Kantha, and custom websites and systems) and make short films. In this policy "we", "us" and "our" mean Nokshi Labs. We decide how the personal data described here is used, so we are responsible for it.

This policy covers the website nokshilabs.com and the contact and demo forms on it. Our products, and the sites our customers run with them, have their own privacy terms.

What we collect

You can read every page of this site without telling us who you are. We only collect personal data in the cases below.

When you send the contact form

• What your message is about (the topic you choose).
• Your name and email address.
• Your company name, if you give it.
• Your message.

When you request a demo

• The product you want to try and the edition you are interested in.
• Your name, work email address and company or brand name.
• Your phone number and country, if you give them.
• For Mehman, the number of units or rooms you run and the demo address you would like, if you give them.
• Anything else you write in the message box.

Technical data sent with a form

• Your IP address (the internet address of your connection), the page the form was sent from and the time. We use these to stop spam and abuse.
• To limit how many forms one connection can send in an hour, our web server keeps the times of recent form submissions in a small file named after a one-way scrambled (hashed) version of your IP address. The file does not hold your IP address itself.

When you simply visit

• Like almost every website, our hosting provider's servers keep standard logs of requests: IP address, the page asked for, the time, and the browser type. These logs are used to keep the site running and secure.

Everything on this site (pages, fonts, images and scripts) is served from nokshilabs.com itself, so your browser does not contact any other company when you visit. We do not use analytics, advertising or tracking tools, and we do not build profiles of visitors.

Cookies

We use one cookie, and only on the contact and demo pages: a session cookie that holds the security token for the form, so we can tell a real visitor from a spam robot. It is strictly necessary for the form to work and is deleted when you close your browser. There are no advertising, analytics or tracking cookies. Our cookie policy has the details.

How we use your data

• To read and reply to your message or demo request. When a form arrives we send you one automatic email to confirm we have it, then reply ourselves.
• To set up a demo you asked for and send you the sign-in details.
• To prepare a quote or proposal, and to keep a record of our conversation if you go on to become a customer.
• To protect the site and the forms from spam, abuse and attacks.
• To meet legal duties, for example keeping business records.

We do not sell your data, we do not use it for advertising, and we do not add you to a mailing list because you sent a form.

Our legal reasons for using your data

We follow the Personal Data Protection Ordinance, 2025 of Bangladesh and general good practice in data protection, including the principles of the UK and EU General Data Protection Regulation (GDPR) for visitors from those places. These laws ask us to have a lawful reason for each use. We rely on these:

• Contract: when you ask for a demo, a quote or a proposal, we use your details to take the steps you asked for before any agreement, and to carry out an agreement if you become a customer.
• Legitimate interests: replying to enquiries about our business, keeping a record of them, and protecting the site and forms from spam and abuse. We only rely on this where it does not override your own rights and interests.
• Consent: where we ask for your permission for something specific. You can withdraw it at any time, and that does not affect anything we did before.
• Legal obligation: where the law requires us to keep or share information.

We apply the same care to everyone, wherever they live.

Who we share it with

We never sell or rent personal data. We share it only with service providers who help us run our business, and only as much as they need:

• our hosting provider, whose servers run this website and Nokshi Console, our own private system where form messages are stored;
• the email service that delivers our replies and the automatic confirmation.

These providers may only use the data to provide their service to us. We may also share data if the law requires it, to protect our rights or the safety of others, or as part of selling or reorganising our business, in which case this policy would continue to protect it.

International transfers

We work with people in more than one country, and our service providers may store or handle data in a country other than yours. When personal data from the UK or the European Economic Area is handled in another country, we take the steps the law requires to keep it protected to the same standard.

Security

• The whole site is served over an encrypted (HTTPS) connection.
• Forms go from our web server to Nokshi Console as signed, encrypted requests, never through your browser, so the console address and its keys stay private.
• Nokshi Console is private and only people who work on Nokshi Labs can sign in to it.
• The spam limit stores only a scrambled form of your IP address, not the address itself.

No system is perfectly secure, but we work to protect your data and will act quickly if something goes wrong.

How long we keep it

• Form messages and demo requests: kept in Nokshi Console for 2 years from when you send them, then deleted. You can ask us to delete them sooner (see how to ask us to delete your data). When we delete a conversation, it is removed for good after 30 days.
• IP address sent with a form: removed from the stored message automatically after 90 days.
• Backup copy by email: if Nokshi Console cannot be reached when you send a form, the message is emailed to our own inbox instead, so nothing is lost. These copies are also kept for 2 years, then deleted.
• Spam limit files: only the last hour of submission times is used, and the files are deleted automatically after a day. They hold no readable IP address.
• Session cookie: deleted when you close your browser.
• Server logs: kept by our hosting provider for a limited period to run and secure the service.

Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• delete your data (see how to ask us to delete your data);
• object to our use of your data, or ask us to restrict it;
• receive the data you gave us in a common, machine-readable format;
• withdraw consent where we rely on it;
• complain to the national data protection authority in Bangladesh set up under the Personal Data Protection Ordinance, 2025 (the national data governance authority), or to the data protection authority in the country where you live. We would be grateful for the chance to put things right first.

To use any of these rights, send us a message through our contact form. We reply within one month, and we may ask you to confirm your identity before acting on a request.

Children

This site and our software are meant for businesses and adults. We do not knowingly collect personal data from children under 16. If you think a child has sent us their details, tell us through the contact form and we will delete them.

Our social media and video channels

Nokshi Labs also publishes short films on video and social media platforms, for example on its "Aina by Nokshi" channels. Those platforms run their own services under their own privacy policies.

When we post to our own pages and channels through those platforms' official tools, we do not collect personal data about viewers beyond what the platforms show us as page owners: overall statistics such as views and audience totals, and public comments and messages people choose to send to our pages. We use this to understand which films help people and to reply to comments and messages. We do not export viewer data, buy audience data or use it for advertising profiles.

How to ask us to delete your data

You can ask us to delete the personal data we hold about you at any time, including anything connected with our social media and video channels.

1. Open our contact form and choose "Something else".
2. Write "Delete my data" in your message.
3. Tell us the email address you used with us and, for our social media and video channels, the name of the account you used, so we can find your data.

We will confirm your request by email, delete your data within 30 days and tell you when it is done. If the law requires us to keep something, such as an invoice, we keep only that and tell you why. You can also delete your own comments on our social media pages yourself at any time through the platform.

Changes to this policy

We will update this page if what we collect or how we use it changes. The date at the top shows the latest version. If a change is significant, we will say so clearly on this page.

Contact us

For any question about this policy or your data, please use our contact form. We reply within one working day. See also our cookie policy and website terms of use.