Privacy Policy

Last updated: 14 June 2026

1. Who we are

Bootcamps.bd (operated by the Bootcamps.bd team, Dhaka, Bangladesh) provides live cohort-based AI, cybersecurity, full-stack, ecommerce and remote-career bootcamps. Contact: privacy@bootcamps.bd.

2. What we collect

Account data: name, email, hashed password, optional Google OAuth identifiers.
Application data: WhatsApp number, skill level, career interest, referral code, UTM parameters.
Assessment data: your answers to the AI career assessment.
Usage data: pageviews, route, device, referrer (aggregate).
Communications: emails and WhatsApp messages you exchange with our team.

3. How we use it

To deliver the service: enrol you in cohorts, contact you about your application, run nurture emails/WhatsApp, recommend bootcamps, attribute referral credits, prevent abuse, and meet legal obligations under Bangladeshi law (NBR records, Bangladesh Bank guidance where applicable).

4. Lawful basis

Contract (delivering the bootcamp), consent (marketing nurture — opt-out anytime), and legitimate interests (security, fraud prevention, product improvement).

5. Who we share data with

Sub-processors: Supabase (database + auth), Resend (email), Twilio (WhatsApp/SMS), Cloudflare (hosting/CDN), Google (OAuth + Analytics if enabled).
Hiring partners: only with your explicit consent when applying for a placement.
Authorities: when required by Bangladeshi law or court order.

We do not sell personal data.

6. International transfers

Sub-processors may host data outside Bangladesh (EU, US). We rely on standard contractual safeguards.

7. Retention

Account + enrollment data: lifetime of the account + 7 years for accounting. Marketing data: until you opt out + 30 days. Logs: 90 days.

8. Your rights

Access, correction, deletion, portability, withdraw consent, complain to the relevant data protection authority. Email privacy@bootcamps.bd — we respond within 30 days.

9. Security

TLS in transit, encryption at rest, role-based access, row-level security on all user-data tables, hashed passwords, MFA available on staff accounts.

10. Children

Not directed at children under 13. Applicants 13–18 require parental consent — contact us if you applied and are a minor.

11. Changes

Material changes will be announced via email and on this page at least 14 days before taking effect.