Privacy policy

1. Who we are

"iamantor.com" is the personal brand and consulting site of Md. Ersaduzzaman (Antor), operated under NextBangla Ltd., registered in Bangladesh. We work with founders across 20+ countries, so we treat data with EU / UK-GDPR rigour by default.

2. What data we collect

2.1 Contact form submissions

When you fill in the form on /contact, we collect: name, email, company (optional), country, intent & budget tags, and your message. We also log your user-agent string, referrer, and a salted hash of your IP address (not the raw IP) for spam-prevention. We do not store payment, financial, or sensitive identity data.

2.2 Analytics

We use Google Analytics 4 with IP anonymisation enabled and Consent Mode v2. No analytics cookies are set until you explicitly accept via the consent banner. If you reject, no analytics requests fire and no analytics cookies are written.

2.3 What we don't collect

• No advertising or remarketing pixels (no Meta, no LinkedIn Insight, no TikTok pixel)
• No session-recording tools (no Hotjar, no FullStory)
• No third-party chat widgets that retain message history server-side
• No cross-site cookies beyond what the cookie banner discloses

3. Why we use it

• Replying to you — name, email, message → so we can have the conversation
• Spam & abuse prevention — IP hash, user-agent → block bots, rate-limit submissions
• Improving the site — analytics (only if you accept) → understand which content founders find useful

Legal basis under GDPR Art. 6: (b) contract / pre-contract for the form, (a) consent for analytics, (f) legitimate interest for spam prevention.

4. Cookies & tracking

We use the absolute minimum:

• Strictly necessary — a iamantor.consent.v1 entry in localStorage to remember your consent choice (12-month expiry). No personal data; no cookie per se.
• Analytics (opt-in) — Google Analytics 4 sets _ga, _ga_XXXXXX cookies only after you click "Accept analytics". Duration up to 24 months. You can withdraw consent any time by clearing site data or via the chat widget.

5. Who we share with

Limited & necessary processors only:

• Google (Analytics) — anonymised analytics events, only after consent.
• Firebase / Google Cloud — hosts the site and contact-form backend (Firestore database, Cloud Functions).
• Email transport (SMTP) — relays your contact-form submission to hello@iamantor.com and an auto-reply back to you.
• Cloudflare (Turnstile, if enabled) — bot-detection challenge during form submission; processes IP + minimal metadata.

We never sell or rent personal data. We never share contact-form contents with any third party for marketing.

6. How long we keep it

• Contact-form submissions — 24 months after last interaction, then purged.
• Analytics — Google Analytics retention setting: 14 months.
• Consent record (localStorage) — 12 months, then re-prompts.
• Backups containing the above — overwritten on a rolling 90-day cycle.

7. Your rights

Under GDPR / UK-GDPR / CCPA / DPDP Act 2023 (Bangladesh):

• Access — request a copy of data we hold about you
• Rectification — correct anything inaccurate
• Erasure ("right to be forgotten") — request deletion
• Restriction / Objection — pause or stop processing
• Portability — receive your data in machine-readable form
• Withdraw consent — at any time, with no impact on prior lawful processing
• Complain — to your supervisory authority (ICO in the UK, your DPA in the EU)

Email hello@iamantor.com with the subject line "Data request" — we respond within 14 days.

8. Contacting us

Data controller: Md. Ersaduzzaman, NextBangla Ltd.
Postal: Nilphamari, Bangladesh.
Email: hello@iamantor.com
WhatsApp: +880 1750 674557 (BD daytime)

For substantive disputes, the courts of Bangladesh have non-exclusive jurisdiction; for EU/UK users, statutory protections under your local laws apply.

Short version: be excellent to each other.