Privacy Policy

1. Introduction & Overview

Welcome to Rumho (https://rumho.com), founded and led by Md Rumman Hossen. Rumho provides bespoke mobile application engineering (iOS & Android via Flutter), scalable full-stack web solutions, API integrations, and ready-to-ship digital software products.

We respect your privacy and are committed to safeguarding personal information collected when you browse our website, request project quotes, purchase digital source codes, or enter into custom development contracts with us.

2. Information We Collect

We only collect information that is strictly necessary to provide high-quality development services, complete transactions, and communicate effectively with you:

• Contact & Consultation Data: When you submit an inquiry or project brief through our contact forms or direct channels, we collect your name, email address, phone/WhatsApp number, company details, and project requirements.
• Account & Order Records: If you purchase digital source code templates or software packages, we collect your name, email address, and order transaction details for delivery and licensing verification.
• Payment Information: All financial payments are processed through secure, PCI-DSS compliant third-party payment gateways (e.g., bKash, UddoktaPay). Rumho never sees, stores, or processes your credit card numbers, bank passwords, or bKash PINs on our servers.
• Technical & Browsing Data: Standard server logs collect non-identifiable technical data such as IP address, browser type, device information, and pages visited to ensure site security, prevent abuse, and optimize performance.

3. How We Use Your Information

We use the collected data strictly for legitimate operational purposes:

• Executing Client Projects: Communicating project milestones, architectural roadmaps, test builds, and production releases.
• Fulfilling Digital Orders: Generating authorized download links, access keys, and technical documentation for purchased code.
• Customer & Technical Support: Responding to client inquiries, resolving bugs, and providing 30-day post-launch warranty services.
• Platform Security: Safeguarding our website against malicious traffic, CSRF attacks, spam, and fraud.

4. Client Confidentiality & Non-Disclosure (NDA)

We understand that our custom development clients entrust us with sensitive business ideas, proprietary source code, and market strategies.

• Strict Confidentiality: All client project blueprints, business models, backend endpoints, and proprietary source codes remain strictly confidential.
• Mutual NDA: We routinely sign formal Non-Disclosure Agreements (NDAs) prior to reviewing confidential specifications upon client request.
• Secure Repositories: Client codebase repositories are kept in strictly isolated, private, and encrypted Git repositories accessible only to assigned engineers.

5. Third-Party Services & Integrations

We do not share your personal information except with trusted service providers necessary for operating our platform and delivering products:

• Payment Processors: Secure verification gateways (bKash, UddoktaPay) for payment settlements.
• Cloud & Hosting Infrastructure: Reliable web hosting and cloud storage providers with robust encryption standards.
• App Publishing Platforms: When engaged for publishing, client apps are deployed directly into the client's official Google Play Console or Apple Developer account.
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests by public authorities.

6. Cookies & Browser Storage

Rumho uses minimal, lightweight cookies and browser local storage solely to enhance your browsing experience:

• Theme Preference: Storing your preferred Dark / Light mode toggle state.
• Authentication Sessions: Securely keeping you signed in to your customer or admin account.
• Security Tokens: CSRF tokens to protect form submissions against forged requests.

We do not use intrusive third-party cross-site advertising trackers or data-brokering cookies.

7. Data Retention & Your Rights

We retain your personal details only as long as necessary to fulfill the purposes outlined in this policy or to comply with accounting and legal obligations.

You have the right at any time to:

• Request a copy of the personal information we hold about you.
• Request correction of any inaccurate or incomplete details.
• Request the deletion of your customer account and associated personal data.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us directly: