Privacy policy

Who we are

SubmitRocket ("we", "us"), based in Bangladesh, provides the directory submission service at submitrocket.com. We are the controller of the personal data described in this policy. For privacy questions, email [email protected].

What we collect

We collect only what we need to run the service:

Account details: your name, email address and a hashed password, or your Google profile name and email if you sign in with Google.
Project details: the product information, logos and screenshots you give us so we can submit them to directories.
Orders: the plan you bought, the amount, your order number, the payment reference and the payment status. Payments are made on our payment provider's hosted page, so we never see or store your card or wallet details.
Messages: what you send us through the contact form, support tickets or email, including attachments.
Newsletter: your email address if you subscribe. We use double opt-in.
Technical data: your IP address and basic browser information, used for security and to limit abuse such as spam.

How we use it, and our legal basis

To provide the service (your account, submissions, dashboard and reports): to perform our contract with you.
To take payments and keep accounting records: to perform our contract, and to meet our legal obligations.
To send emails about your account, orders and submissions: to perform our contract.
To send the newsletter: your consent, which you can withdraw at any time with the unsubscribe link in every email.
To answer your messages: our legitimate interest in helping you, or our contract when the message is about an order.
To keep the site secure and prevent abuse: our legitimate interest in protecting the service and its users.

The directories you choose: we send them your project details, because that is the service you bought. Directories publish listings publicly and handle data under their own policies.
Our payment provider, CoinPayURL: we send it your order number, the amount and the plan you bought, so it can show you the payment page. It handles the payment itself under its own policies.
Service providers that work for us: our hosting provider, our email provider, and Google if you choose to sign in with Google.
Professional advisers, such as accountants and lawyers, when needed.
Authorities, when the law requires it.

We do not sell your data and we do not use advertising or analytics trackers.

International transfers

We are based in Bangladesh, and our service providers may process data in other countries. When we transfer personal data from the UK or the European Economic Area to a country without an adequacy decision, we use the safeguards the law requires, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Agreement.

Cookies

We use only essential cookies and similar browser storage. They keep you signed in and protect forms, and they remember choices you make yourself: your theme, whether you closed the announcement bar, whether you collapsed the dashboard sidebar, and your cookie choice. We do not use analytics, advertising or third-party tracking cookies. The cookie policy lists every cookie by name, purpose and lifetime, and the cookie notice lets you accept or reject optional cookies, which do not exist today.

How long we keep it

Account and project data: while your account is open. When you delete your account, we delete your personal data.
Order records: for as long as tax and accounting law requires. We keep them without personal details where the law allows.
Messages and support tickets: for as long as we need them to answer you and handle follow-up questions.
Newsletter: until you unsubscribe.
Technical data: only for as long as we need it for security and abuse prevention.

How we protect it

We protect your data with encrypted (HTTPS) connections, passwords stored only as strong one-way hashes, encryption of stored secret keys, and access limited to the staff who need it to deliver the service.

Your rights

Depending on where you live, you can ask us to access, correct, export or delete your personal data, to restrict or object to how we use it, and you can withdraw your consent at any time. Email [email protected] and we will reply within one month. If you live in the UK or the European Economic Area, you can also complain to your local data protection authority.

Children

The service is not meant for anyone under 18, and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we will update the date at the top of this page, and for important changes we will email account holders.