Overview & Scope
This Privacy Policy describes how DIPAK ENTERPRISE (“Service Provider,” “we,” “us,” or “our”) collects, uses, stores, protects, and discloses information in connection with the Sovar Biboron mobile application (“Application”) and its related services.
By downloading or using the Application, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
The Application may collect certain information automatically when you download, install, or use it. Depending on the Application's features and your device settings, this information may include:
- Device Information: Device type, operating system, operating system version, and device-related technical information.
- IP Address: Your device's Internet Protocol address, where available.
- Application Usage Information: Pages or screens visited, features accessed, session duration, dates and times of access, and interaction patterns.
- Diagnostic Information: Technical information relating to application performance, errors, crashes, and troubleshooting, where applicable.
The Application may also process information that you voluntarily enter while using its features, such as meeting titles, descriptions, discussion points, decisions, action items, and personal notes.
We collect and process only the information necessary to provide, maintain, and improve the Application's functionality, subject to the actual features and permissions enabled.
2. How We Use Your Information
The Service Provider may use collected information for the following purposes:
- To provide and maintain the Application's features and functionality.
- To improve application performance, usability, and reliability.
- To identify, diagnose, and resolve technical issues.
- To monitor application stability and usage trends.
- To respond to user inquiries and support requests.
- To comply with applicable legal obligations.
- To protect the Application, its users, and the Service Provider against misuse, fraud, or unauthorized activity.
We do not use personal information for purposes unrelated to those described in this Privacy Policy without providing additional notice or obtaining consent where required by applicable law.
3. Meeting Information and User-Provided Content
Sovar Biboron is designed to help users organize and maintain meeting-related information.
Information entered into the Application may include meeting titles, dates, agendas, discussion notes, decisions, participant details, and follow-up tasks, depending on the features used.
User Content Ownership: The Service Provider does not claim ownership of the content you create or enter into the Application. Users are responsible for ensuring that they have the necessary authorization to enter or store information relating to other individuals.
Storage and processing: Information may be stored locally on your device or processed through external services, depending on the Application's implementation and enabled features. Please refer to the Application's actual functionality and applicable disclosures for details.
4. Cookies and Tracking Technologies
The Application or its third-party service providers may use cookies, software development kits (SDKs), pixels, analytics tools, or similar technologies to support application functionality, measure performance, diagnose technical issues, or improve user experience.
Where applicable law requires consent for non-essential tracking technologies, the Service Provider will obtain appropriate consent before activating them.
You may be able to manage certain tracking preferences through your device settings or the relevant service provider's privacy controls.
5. Third-Party Services and Data Sharing
The Service Provider may use trusted third-party service providers to support application operations, analytics, diagnostics, security, or technical maintenance. Such providers may process information on behalf of the Service Provider for the purposes described in this Privacy Policy.
Where applicable, third-party providers are expected to implement appropriate safeguards and handle information in accordance with applicable contractual obligations and privacy laws. The Service Provider does not authorize third-party service providers acting on its behalf to use personal information for unrelated independent purposes.
Circumstances of Disclosure
We may disclose information in the following circumstances:
- Legal Requirements: When disclosure is required by applicable law, regulation, court order, or lawful legal process.
- Safety and Security: When reasonably necessary to protect the rights, property, or safety of users, the Service Provider, or other individuals.
- Fraud Prevention: When necessary to investigate suspected fraud, misuse, security incidents, or violations of applicable terms.
- Service Providers: To trusted third parties that provide services on our behalf, subject to appropriate safeguards.
- Business Transfers: In connection with a merger, acquisition, restructuring, or transfer of business assets, where permitted by applicable law.
Where information is aggregated and irreversibly anonymized so that it can no longer identify an individual, it may be used for analytics, reporting, and service improvement.
6. International Data Transfers
Depending on the services used, information may be processed or stored in countries outside your country of residence, including countries that may have different data protection laws.
Where applicable law requires safeguards for international transfers, the Service Provider will implement appropriate legally recognized mechanisms, which may include:
- Standard Contractual Clauses approved by the European Commission.
- Applicable adequacy decisions.
- Other legally recognized transfer safeguards.
- User consent, where required and legally permitted.
The Service Provider will take reasonable steps to ensure that transferred information receives an appropriate level of protection.
7. Data Retention
The Service Provider retains information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce applicable agreements.
Unless a different period is required by law or justified by a legitimate operational need, the following retention periods may apply:
| Data Category | Retention Period | Context & Legal Grounds |
|---|---|---|
| User-Provided Information | Duration of use of the Application + up to 12 months thereafter | Operational continuity, meeting history retrieval, and user preference persistence. |
| Automatically Collected Information | Up to 24 months from collection | Diagnostic evaluation, service stability analysis, and performance optimization. |
| Aggregated and Anonymized Information | Retained indefinitely | Statistical analysis and trend forecasting as it no longer identifies any individual. |
| Legally Required Information | For the period required by applicable law | Statutory compliance, financial audit guidelines, and legal dispute preservation. |
These periods are general retention guidelines and may vary depending on the nature of the information, the Application's functionality, and applicable legal requirements.
8. Data Deletion and Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- Request access to personal information held about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information.
- Withdraw consent where processing is based on consent.
- Object to or request restriction of certain processing activities.
- Request information about how your personal data is collected, used, or shared.
- Exercise applicable rights relating to data portability.
To exercise these rights, contact the Service Provider at: dipakentconsole@gmail.com
Please include sufficient information to help us identify your request. We may request reasonable verification of your identity before processing certain requests.
We will respond within the timeframe required by applicable law. Certain information may need to be retained where required for legal compliance, security, dispute resolution, or other legally permitted purposes.
9. California Privacy Rights (CCPA/CPRA)
California Consumer Notice: If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), applies to the Service Provider's processing of your information, you are entitled to specific statutory rights.
Under California privacy legislation, you may have the following rights:
- The right to know what categories of personal information are collected, used, disclosed, or shared.
- The right to request access to specific personal information.
- The right to request deletion of personal information, subject to applicable exceptions.
- The right to request correction of inaccurate personal information.
- The right to opt out of the sale or sharing of personal information, where applicable.
- The right to limit certain uses and disclosures of sensitive personal information, where applicable.
- The right not to receive discriminatory treatment for exercising your privacy rights.
To submit a privacy request, contact: dipakentconsole@gmail.com.
The Service Provider will verify and respond to requests in accordance with applicable California privacy laws. Where applicable, authorized agents may submit requests on behalf of California residents, subject to legally required verification procedures.
10. Communications
The Service Provider may use contact information voluntarily provided by users to respond to inquiries, deliver important service-related information, communicate policy updates, or provide necessary notices.
Marketing communications, where applicable, will be sent only as permitted by law. You may opt out of marketing communications where an opt-out mechanism is provided.
11. Children's Privacy
The Application is not intended for children under 16 years of age, or any higher minimum age required by applicable law. The Service Provider does not knowingly collect personal information from children in violation of applicable privacy laws.
If a parent or legal guardian believes that a child has provided personal information through the Application without appropriate authorization, they may contact us at dipakentconsole@gmail.com.
Upon receiving a verified request, the Service Provider will take appropriate steps to investigate and delete such information where required by applicable law. Where parental or guardian consent is legally required, the Service Provider will obtain such consent before processing children's personal information.
12. Security Measures
The Service Provider takes reasonable technical, administrative, physical, and organizational measures to protect information against unauthorized access, alteration, disclosure, destruction, or misuse.
Depending on the nature of the information and the services involved, safeguards may include access restrictions, secure data handling procedures, and appropriate security controls.
However, no method of electronic transmission or storage is completely secure. While we strive to protect information, we cannot guarantee absolute security.
13. Data Breach Notification
If a security incident results in unauthorized access to, disclosure of, or loss of personal information, the Service Provider will investigate and take reasonable steps to mitigate its effects.
Where notification is required by applicable law, affected users and relevant authorities will be notified within the legally required timeframe. Such notification may include information about the nature of the incident, potentially affected information, and recommended protective measures.
14. Your Choices and Opt-Out Rights
You may stop further collection of information by uninstalling the Application from your device. Uninstalling the Application does not automatically delete information that has already been transmitted to the Service Provider or third-party service providers.
Where applicable, you may request deletion of previously collected personal information by contacting: dipakentconsole@gmail.com.
You may also manage available device permissions and certain privacy preferences through your device settings.
15. Changes to This Privacy Policy
The Service Provider may update this Privacy Policy periodically to reflect changes in the Application, data handling practices, legal requirements, or operational procedures.
When changes are made, the revised Privacy Policy will be published with an updated effective date. Where required by applicable law, the Service Provider will provide additional notice or obtain consent before implementing material changes.
Previous versions may be requested by contacting dipakentconsole@gmail.com. We encourage users to review this Privacy Policy periodically.
Current Effective Date: This Privacy Policy is officially effective as of October 2, 2026.
16. Your Consent & 17. Contact Information
16. Your Consent
By using the Application, you acknowledge the information practices described in this Privacy Policy.
Where processing requires consent, the Service Provider will obtain consent through an appropriate affirmative action before the relevant processing begins. You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Other processing activities may be performed on a different lawful basis where permitted by applicable law.
17. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact:
DIPAK ENTERPRISE • Privacy Desk
Application: Sovar Biboron
Corporate Address: Station Road, Sunamganj Sadar, Bangladesh
Direct Helpline: +8801356647471