Privacy policy

Last updated: 16 October 2026 · ChequeDesk

This policy explains what personal and business information ChequeDesk ("we") processes when you use ChequeDesk, and why.

1. What we collect

• Account details: names, email addresses, an optional mobile number (verified by SMS code), role, language and sign-in history (time and IP address).
• Company details: company name, address and contact details, and the bank accounts and cheque templates the company sets up.
• Cheque data: payee names, amounts, dates and memos entered by users, with the approval and print history.
• Billing data: invoices and payment references. Card and mobile-wallet details are entered on our payment partners' pages (SSLCommerz, bKash); we never see or store card numbers or wallet PINs.
• Device data: for paired Windows print utilities, the computer name, a one-way fingerprint of the machine, and printer names.

2. How we use it

Only to provide and secure the service: to sign you in, run the approval workflow, print the cheques you authorise, keep the audit log, send service emails and SMS you have opted into, take payments and issue VAT invoices, prevent fraud, and meet legal obligations. We do not sell personal data and do not use it for advertising.

3. Protection

• All traffic uses HTTPS. Bank account numbers are encrypted in the database; passwords are hashed.
• Every company's data is kept separate from other companies'. Access inside a company follows the roles the company assigns.
• Actions are written to a tamper-evident audit log. Backups are encrypted.
• Emails and SMS never contain payee names, amounts or account numbers.

4. Who we share it with

Only with service providers who process it on our behalf: hosting, email delivery, SMS delivery and payment processing (SSLCommerz, bKash and the customer's chosen bank or wallet). We also share it with authorities when Bangladeshi law requires us to.

5. How long we keep it

For as long as the company's account is open. Invoices are kept for as long as tax law requires. After an account is closed, data is deleted from live systems after 90 days and from backups as they expire. One-time SMS codes are never stored.

6. Your choices

You can change your name, password, language, mobile number and SMS preferences in your profile. To get a copy of your data or have it corrected or deleted, ask your company's administrator or contact us. Some records (audit logs and invoices) cannot be deleted while the account is open, because the company needs them for its own audit.

7. Cookies

We use only the cookies needed to keep you signed in, protect forms, and remember your language. We do not use advertising or tracking cookies.

8. Contact

Questions or requests about privacy: see our contact page.