This policy explains what personal information B Academy collects, why we collect it, and how we protect it. By using B Academy, you agree to the practices described here.
1. Overview
B Academy ("we", "us", "our") operates an online learning platform for students in Bangladesh, offering recorded courses, live classes, model tests, and an admission tracker. This policy applies to everyone who visits our website or creates an account.
2. Information We Collect
We collect the following categories of information:
- Account information — your name, phone number, email address, and password (stored securely hashed, never in plain text).
- Profile information — an optional avatar, bio, and other details you choose to add.
- Course activity — enrollments, lesson progress, exam attempts and scores, live class attendance, and messages/comments you post.
- Order information — invoices, order status, and coupon usage (see the Payment Information section below for how actual payment details are handled).
- Technical information — IP address, browser/device type, and pages visited, used for analytics and security (e.g. rate-limiting abusive requests).
- Contact form / support messages — whatever you submit through our Contact form or Help Center support tickets.
3. How We Use Your Information
- To create and manage your account and enrollments.
- To deliver course content, live class access, exams, and certificates.
- To process payments and issue invoices.
- To send account-related notifications (payment confirmations, grading results, live class reminders, notices from your teachers).
- To respond to support requests and contact form submissions.
- To monitor site traffic and improve the platform (aggregated, non-identifying analytics).
- To detect and prevent fraud, abuse, and security threats.
4. Payment Information
All payments are processed by SSLCommerz, a licensed third-party payment gateway. When you pay by bKash, Nagad, Rocket, or card, your payment credentials are entered directly on SSLCommerz's secure page — B Academy never receives or stores your card number, PIN, or mobile wallet password. We only receive confirmation that a payment succeeded, along with a transaction reference, which we use to activate your enrollment and generate your invoice.
5. Cookies & Local Storage
We use a session cookie to keep you logged in and to protect the site against cross-site request forgery (CSRF). We also use your browser's local storage for small UI preferences, such as remembering that you dismissed the notification permission prompt. We do not use third-party advertising or tracking cookies.
6. Notifications
If you allow browser/push notifications, we use that permission solely to notify you about your own account activity — payments, grading results, live class schedules, and notices relevant to you. You can revoke this permission at any time from your browser's site settings.
7. Third-Party Services
We rely on a small number of trusted third-party services to operate the platform:
- SSLCommerz — payment processing.
- Google Fonts — web fonts, loaded from Google's servers.
- Video/streaming providers — for course video playback, where used.
- Push notification services (e.g. browser vendors' push infrastructure) — to deliver notification popups you've opted into.
Each of these providers has its own privacy practices governing the technical data needed to perform their function.
8. Data Sharing
We do not sell your personal information. We share information only: with the teachers of courses you're enrolled in (for grading and communication), with SSLCommerz to process a payment, or when required by law.
9. Data Retention
We retain account and course activity data for as long as your account is active, and for a reasonable period afterward to comply with financial record-keeping requirements (e.g. invoices). You may request deletion at any time — see Your Rights below.
10. Your Rights & Choices
- You can view and update most of your profile information directly from your account.
- You can request a copy of the personal data we hold about you.
- You can request that we delete your account and associated personal data, subject to any records we're legally required to keep (e.g. paid invoices).
- You can revoke notification permissions at any time from your browser settings.
To exercise any of these, contact us using the details below.
11. Children's Privacy
B Academy is intended for HSC and admission-test students. If you are under 18, please use the platform with a parent or guardian's awareness, particularly for payments.
12. Security
We use industry-standard practices to protect your data, including hashed passwords, encrypted connections (HTTPS), CSRF protection, and rate-limiting against abuse. No method of transmission or storage is 100% secure, but we work to protect your information to the best of our ability.
13. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.
14. Contact Us
Questions about this policy or your data? Reach us at bacademy.class@gmail.com or call +8801577588132.