1. Who is responsible for your data

The data controller is Techwave Solutions, a sole proprietorship registered in Bangladesh and owned by MD. ABDUL KADER.

2. What this policy covers

This policy applies to techwavesolutions.net and its subdomains, to our products (the FormBridge for Zoho WordPress plugin and the paid Time Tracker for Zoho CRM extension), and to our Zoho consulting, implementation and development services.

When we deliver services inside your Zoho account or on your website, you remain the controller of the data in those systems and we act on your instructions.

3. Data we collect

3.1 When you visit the website

• technical data your browser sends: IP address, browser and device type, referring page, pages viewed and time of visit;
• cookie and analytics data, as described in our Cookie Policy.

3.2 When you contact us or ask for a quote

• your name, email address, phone or WhatsApp number, company name and country;
• whatever you choose to tell us about your project, your systems and your requirements.

3.3 When you buy a plugin licence

Our checkout is operated by Paddle, which acts as the merchant of record and as an independent controller for payment and tax purposes. Paddle collects your payment details; we never see or store your full card number. From Paddle we receive and store:

• your name and email address;
• billing country and, for business buyers, company name and VAT/tax identifier;
• order reference, product, plan, amount, currency and subscription status.

3.4 When you activate a Pro licence

Our licensing service records the licence key, the site it is activated on, the activation status and the technical versions described in section 4.2.

3.5 When you ask for support

Your messages and any log files, screenshots, configuration exports or temporary access credentials you choose to send us. Please redact anything you do not want us to see, and change any credential you share with us once the work is done.

3.6 When you subscribe to updates

Your email address and subscription preferences, until you unsubscribe.

4. What our plugins send — and what they do not

4.1 FormBridge for Zoho — your form data

FormBridge connects your WordPress site to your Zoho account using credentials that you create in the Zoho API console.

• Your Zoho access and refresh tokens are stored encrypted in your own WordPress database and never sent to us.
• Delivery logs are written to your own WordPress database. Storing submitted values in those logs is an option you switch on yourself, and you control how long logs are kept.
• The free edition sends nothing to Techwave Solutions during normal use. The one exception is entirely optional: if you deactivate the plugin you may choose to send a short feedback note, which transmits only the reason you pick, the note you type and the plugin version — no site address, account, email or other information.

4.2 FormBridge Pro — licence checks

To activate and keep a paid licence valid, the Pro plugin contacts our licensing service at subscription.techwavesolutions.net and sends only:

No form submissions, no Zoho data, no customer records and no site content are sent in a licence check. There is no behavioural tracking or usage telemetry in the plugin.

4.3 Time Tracker for Zoho CRM (paid extension)

Time Tracker is bought from Zoho Marketplace, so Zoho holds the billing details for it and we receive only the order information Zoho makes available to us as the publisher. The extension itself runs entirely inside your Zoho CRM through Zoho's authenticated APIs. It has no server or database of its own, and Techwave Solutions does not receive, store or have access to any of your CRM data. It does not transmit CRM data to us or to any external server, and it uses no cookies, local storage, tracking pixels, analytics or telemetry. Data it reads or writes stays in your Zoho account under Zoho's terms and your own configuration.

5. Why we use your data, and on what basis

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

6. Who we share it with

If the business is ever transferred, personal data may transfer with it; we will tell you before that changes how your data is used.

7. International transfers

We operate from Bangladesh and use service providers located in other countries, including the United States and the European Union. Where personal data of people in the EEA or the UK is transferred outside those areas, we rely on appropriate safeguards — typically the European Commission's Standard Contractual Clauses included in our providers' data-processing terms. You can ask us for details using the contact below.

8. How long we keep it

We keep personal data only for as long as the purpose we collected it for still applies. Because that purpose differs from one record to another, the period is set by the criteria below rather than by a single fixed term.

• Order, invoice and tax records — for as long as tax, accounting and company-record law requires us to be able to produce them, and then for any period in which a claim could still be brought. Paddle, as merchant of record, keeps its own copy of the payment record under its own retention rules.
• Licence and activation records — while the licence is active, and afterwards for as long as we may need them to handle renewals, re-activations, abuse of a key, or a dispute about a purchase.
• Support conversations — while we are helping you, and afterwards for long enough to understand the history of an issue if it returns. Temporary credentials you give us for support are deleted as soon as the work is finished.
• Project and consulting files — for the length of the engagement and afterwards for the period agreed in your proposal, or for as long as we may need them to answer a question about the work we delivered.
• Enquiries that do not become projects — for a short period only, so we can recognise you if you come back to us.
• Marketing subscription — until you unsubscribe or ask us to remove you.
• Website analytics — for the period set in the analytics tool we use, which is measured in months, not years.

When a purpose ends and no legal obligation requires us to keep a record, we delete it or remove anything that identifies you so that what remains is only statistics. Where deletion is not immediately possible — for example in a backup — the data is put beyond use and deleted when that backup is rotated out.

You can ask us at any time what we hold about you and ask us to delete it, as described in section 9.

Temporary credentials you give us for support are deleted as soon as the work is finished.

9. Your rights

Depending on where you live, you may have the right to:

• ask what personal data we hold about you and get a copy;
• have inaccurate data corrected;
• ask us to delete data we no longer need;
• object to, or ask us to restrict, certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting what we did before you withdrew it;
• complain to your data protection authority.

To use any of these rights, email support@techwavesolutions.net. We reply within 30 days and may need to verify your identity first. Requests are free unless they are excessive or repetitive.

For payment records held by Paddle as an independent controller, you can also contact Paddle directly.

10. Cookies

The cookies and similar technologies this website uses, and how to control them, are described in our Cookie Policy. Our plugins set no cookies on your visitors' browsers.

11. Security

We use appropriate technical and organisational measures to protect personal data, including HTTPS across the website, access control on our systems, and encryption of sensitive credentials. In our plugins, Zoho tokens are stored encrypted in your own database, and tokens and secrets are redacted from log files.

No method of transmission or storage is completely secure. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as the law requires.

12. Children

Our website, products and services are meant for businesses and are not directed at children under 16. We do not knowingly collect their data; if we learn that we have, we delete it.

13. Changes to this policy

We update this policy when our products, providers or legal obligations change. The "last updated" date above shows the current version. Material changes will be highlighted on this page and, where appropriate, sent by email.