UpottoUpotto

Legal & Transparency

Last updated: September 19, 2026

Privacy Policy

We respect your privacy and believe in straight talk. This policy explains what information Upotto collects, why we collect it, what third-party services are used, and how you stay in control of your data.

01 — Overview

Who we are

Upotto (“we,” “us,” or “our”) is a business software company based in Rajshahi, Bangladesh. We build software products including Upotto ERP (for wholesale supply chains and distribution) and Mudiflow (for retail stores), and provide bespoke engineering, mobile application, and technical consulting services worldwide.

This Privacy Policy applies to information collected through our website (upotto.com) and direct inquiries. If you enter into a dedicated software contract or SaaS subscription with us, terms in that agreement govern specific system data.

02 — Information Collection

What data we collect

We only collect information you voluntarily provide to us, plus minimal technical signals necessary to operate and safeguard the site:

1. Contact Form Submissions

When you contact us through our website form, we collect:

  • Full name: so we know who we are communicating with.
  • Company or organization name: to understand your business context.
  • Phone number: formatted with country code, for phone or WhatsApp follow-up.
  • Email address: to send replies, quotes, and consultation details.
  • Message details: description of your project, business requirements, or questions.

2. Security & Abuse Prevention Data

To prevent automated bots, spam blasts, and denial-of-service abuse:

  • IP address: processed in-memory to enforce rate limits (e.g. maximum 5 contact submissions per hour).
  • Form timing timestamps: to detect instant automated script submissions.
  • Honeypot fields: invisible anti-bot traps that legitimate users never fill out.

3. Site Analytics & Tracking Scripts

We do not run invasive tracking. Our public website does not include Google Analytics, Google Tag Manager, Meta (Facebook) Pixel, behavioral fingerprinting, or third-party ad retargeting trackers. We do not track you across the web.

03 — Data Usage

How we use your information

We use collected information strictly for genuine business purposes:

  • Responding to inquiries: replying to your contact form submissions, evaluating your requirements, and scheduling discussions.
  • Project execution: preparing proposals, estimates, agreements, and delivering contracted software engineering or ERP services.
  • Customer communications: sending project milestone updates, technical documentation, or transactional notifications.
  • Site security: shielding our servers and communication endpoints from fraud, spam, and malicious activity.

We do not use your submitted contact information for unsolicited mass marketing or automated sales newsletters without your explicit consent.

04 — Sharing & Disclosures

Data sharing and third-party tools

Clear promise: We never sell, rent, monetize, or trade your personal information to any third party or data broker under any circumstances.

To run our website and respond reliably, we rely on a small number of infrastructure and messaging tools. Here is the complete list of third-party services integrated into our site:

Resend

Transactional email delivery

Routes contact form submissions to our inbox and delivers automated receipt confirmations.

Telegram Bot API

Internal team notifications

Transmits instant alert notifications of contact inquiries to Upotto's private administrative channel.

CallMeBot / WhatsApp API

Operational alerting (optional)

Used selectively for immediate notification alerts to our on-call operations team.

Cloudflare Turnstile

Bot and spam prevention (optional)

Privacy-first CAPTCHA alternative used to protect forms against automated spam without cross-site tracking.

Hosting & Infrastructure

Server hosting & network routing

Standard web server infrastructure that processes incoming requests and temporary connection logs (IP, user agent).

Legal compliance: We will only disclose your information if compelled by valid court order, warrant, or mandatory legal process in accordance with the laws of Bangladesh.

05 — Cookies

Cookie usage

Upotto does not set persistent advertising, tracking, or analytics cookies on your computer or mobile device.

Any transient cookies or session headers generated by our hosting infrastructure are strictly operational (necessary to deliver pages securely, route traffic, or verify anti-bot tokens) and do not follow your browsing behavior across other sites.

06 — Retention & Your Rights

Data retention and requesting deletion

We store inquiry information only as long as necessary to conduct business discussions, fulfill client agreements, or comply with financial and tax regulations.

You have the right to request deletion

If you have previously submitted an inquiry and would like us to delete, update, or provide a copy of your personal data from our contact records, simply email us at contact.upotto@gmail.com. We will process your request promptly within 5 business days.

07 — Updates

Changes to this policy

We may occasionally revise this Privacy Policy to reflect improvements to our practices, service integrations, or regulatory updates. When changes are made, we will update the “Last updated” date at the top of this page. Continued use of our website signifies acceptance of the updated policy.

Contact us

Questions about privacy?

If you have questions about this Privacy Policy, your personal information, or how we handle data, feel free to reach out directly to our team.

WhatsApp / Phone+880 1516 577 736
Location

Rajshahi, Bangladesh