Privacy policy

This site is run by Ay-Rojgar (আয়-রোজগার), based in Dhaka, Bangladesh. You can send any question, request or complaint about this policy to support@ayrojgar.com; full contact details are at the bottom of this page.

We have one aim: to help people in Bangladesh understand, start and grow new small businesses, and to let them see verified figures before they put money into one.

We do not make up the business information. It is public information collected from many different trusted sources: government and development-agency publications, research, published news and reports, market price surveys, and people who run these businesses themselves. On a business page, every material figure is marked with where it comes from — an official source, a market price, a verified practitioner, or our own editorial estimate — and the sources are listed on the page. Readers and practitioners can propose a correction to any figure; our staff check it before anything changes.

About money, plainly: Ay-Rojgar never takes money from the people who use it. We do not invest, we never ask anyone to invest or to pay, we hold nobody's money, and we take no fee for introducing people. Nothing on the site is a financial promise or investment advice. If anyone asks you for money in Ay-Rojgar's name, it is a fraud — report it to support@ayrojgar.com.

Until you write something, we know nothing about you — you can read the site without an account. What we store:

• Account: your name, email address and password. We never see the password; our platform provider stores it encrypted. Your profile photo, if you add one.
• Signing in with Google or Facebook: only the name, email and photo they hand us. We never receive your password or your contacts.
• What you write: comments, stories, suggested corrections and the reasoning behind them, and reports. Once published, these are public.
• If you apply to be a verified practitioner: the evidence and files you send. These are never published; only reviewing staff see them.
• Questions you ask the AI: the question, the answer, which businesses it was about, and whether it could answer. If you are signed in, this is linked to your account; otherwise it is not linked to anyone.
• Basic server records: which page was requested, the result, and how long it took. Your IP address is not stored in these records — it is used only for a moment, to stop anyone flooding the site with requests.
• Page visits, counted by us and nobody else: which page, which business or story, Bangla or English, phone or computer, your country, and the site that sent you here. If you are not signed in you are known only by a code made from your IP address and browser, which changes every day and cannot be turned back into either; if you are signed in, the visit is linked to your account. Kept for 400 days, then deleted.
• Cookies and a few preferences in your browser — listed separately below.

We keep each item for one reason only: to run the site.

• Keeping you signed in, and showing your saved businesses, the businesses you follow and your corrections.
• Publishing what you wrote, and knowing who wrote it.
• Stopping abuse, spam and false information.
• Emailing you when a business you follow publishes new figures.
• Letting staff see why the AI gave a wrong answer or no answer, so they can fix it.

We never sell your information and never hand it to advertisers. Those who see it as part of their work:

• Our editors and staff: as much as they need to decide on publishing, verification or complaints. Every decision is recorded with the name of the person who made it.
• Xenition, our platform provider, which runs the database, sign-in, files, email sending and the AI.
• Cloudflare, whose servers deliver the site to you.
• YouTube, only if you play a video. Videos are embedded through youtube-nocookie.com, so no cookies are set until you press play.
• Microsoft Clarity, on the public pages: how a page is used — clicks, taps and scrolling — as heatmaps and recordings, so we can see what is hard to use. What you type is hidden, and your account pages are hidden entirely. Microsoft keeps recordings for about 30 days, under its own privacy statement.
• Google Analytics, on the public pages: which pages are read, from which country and which site or search led here, as counts. It never sees what you type, and your IP address is shortened before it is stored, under Google's own privacy statement.
• Google or Facebook, only if you sign in with them.
• The authorities, where the law properly requires it.

Your email address is never shown on the site. Stories are published without names, using a description such as "a new entrepreneur from Rajshahi"; your real name and contact details stay in a note only staff can see. Verification evidence, staff notes and who reported what are also visible to staff only.

Anyone who wants to find a business partner, or to become one, has their identity checked first. What we collect for this, and how long we keep it:

• Identity documents — a national ID, or a trade licence and TIN. The images are deleted from both storage and the database 30 days after the decision. After that, we keep only how you were checked, who checked you, when, and the last four characters of the number.
• The request you write — which business, how much, what you already have, and your plan. It is never public: our staff read it, and verified partners see it without your name or your number.
• Your phone number — shown to only one person, and only after you yourself have accepted their request.
• A record of who saw whose number, and when. If a complaint comes in months later, we investigate it using this record, so it is not deleted.

Local businesses (কাছের উদ্যোগ) lists people running a business, by area, so that others can find, visit and learn from them. A listing reaches the site in one of two ways, and the page always says which:

• Added by its owner. Everything on it is what the owner chose to show: the address, the owner's name and a map pin only if they turned them on. Our staff may ring the number before approving. The owner can change it or take it down at any time from their account.
• Collected by us from the business's own public page — its Facebook page or website, never a personal profile. We copy only what that page itself publishes, record the address we copied it from and show it on the listing, and show no phone number until the owner confirms the listing is theirs.
• If a collected listing is about you or your business and you want it changed or removed, write to us or use the link on the listing. We remove it within 24 hours of hearing from you; it costs nothing and needs no reason.
• Deleting your account takes your listings down and removes your name, phone, address and map pin from them. A banned account's listings are hidden.
• Listings are never ranked by payment, and nothing in them changes a business guide's figures or the AI assistant's answers.

We use no advertising cookies. Besides the cookies the site cannot work without, Microsoft Clarity and Google Analytics set their own on the public pages to tell one visit from another:

• bdb_access and bdb_refresh — set when you sign in, so you are not asked for your password on every page. Deleted when you sign out.
• bdb_social_next — during a Google or Facebook sign-in, remembers the page you came from. Deleted the moment it is used.
• bdb_locale — remembers whether you chose Bangla or English, for one year.
• sidebar_state — on staff admin pages only; remembers whether the side menu is open.
• _clck and _clsk — Microsoft Clarity's, on the public pages only: _clck tells your visits apart for a year, _clsk joins the pages of one visit for a day.
• _ga and _ga_… — Google Analytics', on the public pages only: they tell your visits apart for up to two years.
• In your browser's own storage (it stays on your device and never reaches us): the businesses you put in the compare tray, your recent searches, and how many columns you prefer for the business list.

We keep your account information for as long as your account exists. If you delete your account, your name, email and photo are removed; comments or stories you published may remain without your name, because other people's discussion is attached to them. Basic server records are deleted within days. Records of editorial decisions — who published or corrected what — are kept permanently, because that is how the site stays accountable.

You can do all of this yourself from your account settings, without asking anyone:

• Download everything we hold about you, in one file.
• Delete your account entirely.
• Change your name and photo at any time.
• Withdraw a correction you suggested, before a decision is made on it.
• Email us if something looks wrong or you want something removed — we will answer.

The site is for adults. We do not knowingly keep an account for anyone under 13. If you know of such an account, tell us and we will delete it.

Everything travels over https. Passwords are stored encrypted and we cannot read them. Verification files are kept in private storage and cannot be opened with an ordinary link. Every staff decision is recorded. Still, no system is perfectly safe: use a strong password and do not use it anywhere else.

The date on this page changes with it, and anything substantial will be announced on the site. Ask us by email if you want a copy of an earlier version.

Any question, request or complaint about privacy: