Privacy Policy
Contents
1. Who We Are
BD Pigeon Hub is operated by AlphaCue Technologies, a technology company based in Bangladesh.
- Website: bdpigeonhub.com
- Contact email: alphacuetechnologies@gmail.com
We operate the BD Pigeon Hub website and mobile application (iOS and Android). By using either, you agree to this Privacy Policy.
2. Information We Collect
2.1 Account Information
When you register, we collect:
- Username (required)
- Email address (required)
- Password (stored as a secure hash — we never store your plain-text password)
- First name, last name (optional)
- Phone number (optional)
- Location / city (optional)
- Bio (optional)
- Profile photo / avatar (optional)
2.2 Pigeon & Listing Data
When you add pigeons or create listings, we collect:
- Pigeon name, ring number, breed, gender, color, date of birth, weight, description
- Pigeon photos (stored on our servers; compressed automatically on upload)
- Pedigree records: sire (father) and dam (mother) pigeon links, notes
- Listing details: title, price, location, district, negotiability status
2.3 Auction Data
- Auction listings you create: title, description, starting price, reserve price, start/end times
- Bids you place: amount and timestamp
- Auction result: winner record
2.4 Offer & Payment Data
- Offer amounts and messages you send or receive
- Payment method selection (bKash, Nagad, or Rocket)
- Mobile financial service transaction ID (TXN ID) that you self-report
We do not process payments directly. All financial transactions happen peer-to-peer via third-party mobile banking services. We only store the TXN ID you enter for record-keeping purposes. See Section 5 for more detail.
2.5 Wall Posts & Social Content
- Post text content and images you share on the community wall
- Comments you write on posts
- Likes you give to posts
- Pigeon tags you attach to posts
2.6 Messages
Private messages you exchange with other users through the platform messaging system, including message text and timestamps. Messages are stored to enable the conversation history feature.
2.7 Technical & Usage Data
- IP address (logged by our web server for security purposes)
- Browser type, device type, operating system
- Pages visited, time spent, clicks (via Google Analytics — see Section 6)
- JWT access tokens stored locally on your device (not on our servers)
- Session data (web only)
2.8 Image Authenticity Metadata
When you upload a photo, our system automatically analyses the image's EXIF metadata and compression patterns to estimate whether the photo may have been digitally edited. This produces an edit score (0–100) and a plain-language note (e.g. "Camera firmware: Nikon"). This information is stored alongside the image and shown to other users to promote honest listings. No facial recognition or biometric data is used.
3. How We Use Your Information
- Provide the service: Show your listings, pigeons, and posts to other users; enable bidding, messaging, and offers.
- Account management: Authenticate you, restore sessions, allow profile editing.
- Notifications: Deliver in-app alerts about offers, bids, messages, and other activity relevant to your account.
- Safety & moderation: Detect fraud, fake listings, spam accounts, and violations of our Terms of Service.
- Platform improvement: Analyse usage patterns (via Google Analytics) to improve features and fix bugs.
- Communication: Send transactional emails such as welcome messages or password reset links.
- Legal compliance: Retain records as required by applicable law.
We do not use your data for personalised advertising, nor do we sell your data to any third party.
4. How We Share Information
4.1 Other Users
Your username, profile photo, location, and public listings are visible to all users of the platform. Private messages are visible only to the participants of that conversation.
4.2 Service Providers
We share data with the following third-party services that help us operate the platform:
- Google Analytics (GA4) — anonymous usage statistics (page views, session duration). Data is processed by Google in accordance with Google's Privacy Policy.
- Google reCAPTCHA v3 — bot detection on web forms. Google processes a risk score based on your interaction patterns. See Google's Privacy Policy.
- Hosting provider — our servers store all platform data. The hosting provider has no independent right to use your data.
- Google Play Store / Apple App Store — installation and update delivery. See their respective privacy policies for data they collect about downloads.
4.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority in Bangladesh or any jurisdiction with legal authority over us.
4.4 Business Transfer
If AlphaCue Technologies is acquired, merged, or transfers its assets, your data may be transferred as part of that transaction. You will be notified via email or a prominent notice on the site before your data is subject to a different privacy policy.
5. Payments & Financial Data
BD Pigeon Hub is a listing and auction platform only. We do not act as a payment processor, escrow agent, or financial intermediary.
- All monetary transactions are conducted directly between buyers and sellers using mobile financial services (bKash, Nagad, Rocket) that are entirely outside our platform.
- We store only the transaction ID (TXN ID) that you voluntarily enter into our system to confirm a payment. We do not store mobile wallet account numbers, PINs, or any sensitive financial credentials.
- We are not responsible for payment disputes. Any dispute must be resolved between the parties and their respective mobile banking providers.
6. Cookies & Tracking
The website uses the following cookies and tracking technologies:
- Session cookie (Django) — keeps you logged in on the web. Expires when you close your browser or after 30 days.
- CSRF token — a security token included in all forms to prevent cross-site request forgery. Not used for tracking.
- Google Analytics cookies — collect anonymous usage data (_ga, _gid). You can opt out via Google Analytics Opt-out.
- Google reCAPTCHA cookie — sets a cookie to identify returning visitors for bot-risk scoring.
The mobile app does not use cookies. It uses JWT tokens stored in your device's secure storage, which are not transmitted to any third party beyond our own servers.
7. Data Retention
- Active accounts: Data is retained for as long as your account exists.
- Deleted accounts: We delete your personal data within 30 days of receiving a valid deletion request. Anonymised aggregate statistics may be retained indefinitely.
- Transaction records: Offer and payment TXN ID records may be retained for up to 1 year after the transaction for dispute resolution and legal compliance purposes.
- Server logs: IP-level access logs are retained for up to 90 days for security monitoring.
8. Security
We implement the following security measures:
- Passwords are hashed using Django's PBKDF2-SHA256 algorithm — never stored in plain text.
- All data in transit is encrypted via HTTPS/TLS.
- API access is protected by short-lived JWT tokens (1-day expiry) with automatic rotation on refresh.
- Web forms are protected by CSRF tokens and Google reCAPTCHA v3.
- Admin panel access is restricted to verified staff accounts.
No system is 100% secure. If you believe your account has been compromised, contact us immediately at alphacuetechnologies@gmail.com.
9. Children's Privacy
BD Pigeon Hub is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it promptly.
Users aged 13–17 should use the platform only with parental or guardian consent.
10. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update inaccurate or incomplete data via your profile settings, or by contacting us.
- Deletion: Request deletion of your account and all associated data. See our Data Deletion page for the full process.
- Objection: Object to certain types of processing (e.g. analytics) by contacting us.
- Portability: Request an export of your data in a machine-readable format.
To exercise any of these rights, email us at alphacuetechnologies@gmail.com with the subject line "Privacy Request — [your username]". We will respond within 30 days.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify registered users via email or an in-app notification at least 14 days before the change takes effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
12. Contact Us
For any questions, concerns, or requests related to this Privacy Policy, contact us at:
- Email: alphacuetechnologies@gmail.com
- Website: bdpigeonhub.com/legal/support/