Privacy Policy

Oripio is a product design and development agency in Dhaka, Bangladesh, and the controller of the information described here. This policy covers our website, enquiry forms, and job applications.

We don’t sell your information or share it for advertising.

You can read anything here without telling us who you are. Vercel Web Analytics and Speed Insights measure page views and loading speed — both cookieless, both aggregated, neither able to identify you or follow you elsewhere.

Google Analytics tells us which pages people find useful, and Microsoft Clarity records how pages get used — clicks, scrolling, mouse movement — so we can see where a layout confuses people. Both set cookies, so we ask first, and both stay switched off unless you accept. Decline and nothing is set; we still see the cookieless numbers above. If your browser sends “Do Not Track”, we take that as a no and don’t ask.

We set one cookie of our own: it signs our team in to the admin dashboard. Visitors never get it.

Our contact and pricing forms ask for your name, email, budget, how you found us, and what you’re building. We use it to reply and scope the work — nothing else. Enquiries reach us as email, and we keep them for up to 24 months after we last speak.

This is the most personal information we handle, so here’s exactly what happens to it.

We collect your name, email, phone, country, LinkedIn and portfolio links, your role and experience, availability, remote preference, expected compensation if you share it, your cover letter, and your résumé. A one-time code sent to your inbox confirms the address is yours.

We also record the country your application was submitted from, worked out from your IP address by our hosting provider. We keep only the country — never the address itself — because these roles are open to candidates based in Bangladesh, and it tells our team when that may need checking.

Your résumé is stored privately — no public address, opened only by our hiring team through a link that expires in minutes. We also record your application’s status and our interview notes.

Every application is read by a person. No automated screening, no scoring.

If you’re not hired we keep it for up to 12 months, in case a closer-fitting role opens — or delete it sooner if you ask.

Six providers handle data on our instructions: Vercel (hosting and analytics), Google (analytics), Microsoft (Clarity), Neon (database), Cloudflare R2 (private file storage), and Resend (email). Each is contractually bound to use it only for us, and all operate globally — so your information may be processed outside your country, including in the US and the EU, under Standard Contractual Clauses where required.

Beyond that, we disclose only where the law requires it.

Wherever you live, you can ask to see what we hold, correct it, delete it, get a copy, or have us stop using it. Consent you gave — applying for a job, for instance — you can withdraw at any time.

Email hello@oripio.com with “Privacy” in the subject. We reply within 30 days, free, though we may confirm it’s really you first. In the EU or UK you can also complain to your data protection authority.

Data is encrypted in transit and at rest, passwords are hashed, and candidate information reaches only the people doing the hiring. Nothing is perfect — if a breach ever affects you, we’ll tell you and the regulator.

We update this policy when our practices change; the date at the top is always current. The site isn’t intended for anyone under 16, and we don’t knowingly collect their information.

Questions, requests, or complaints about privacy all go to the same place: hello@oripio.com.