Privacy Policy
Last updated: 1 May 2026 · Effective from: 1 May 2026
1. Who we are
Khansland is a service platform operated by Habib Khan, based in Bangladesh. We provide multiple online services through our subdomains, including but not limited to:
- Gigs (gigs.khansland.com.bd) — AI-powered tools and services
- Shop (shop.khansland.com.bd) — online marketplace
- Meal (meal.khansland.com.bd) — meal ordering platform
- Euro (euro.khansland.com.bd) — service applications
- And other services under the khansland.com.bd domain
In this policy, "Khansland", "we", "us", or "our" refers to all of the above. "You" or "user" refers to anyone who creates an account or uses our services.
Contact: support@khansland.com.bd
2. Information we collect
Information you give us directly:
- Name, email address, phone number when you register
- Profile information you choose to provide
- Content you create using our tools (e.g., generated text, images, posts)
- Payment information processed through bKash (we do not store your bKash PIN or full card details)
- Messages you send to our support team
Information we collect automatically:
- IP address, browser type, device information
- Pages you visit and actions you take on Khansland
- Cookies and similar tracking technologies (see Section 8)
- Approximate location based on IP address
Information from third parties:
- When you connect a Facebook Page to Gigs, we receive your Facebook user ID, name, list of Pages you administer, and access tokens that allow us to post on your behalf only when you ask us to.
- When you pay with bKash, we receive transaction confirmation data.
3. How we use your information
We use your information to:
- Provide, maintain, and improve our services
- Process payments and deliver purchased credits or items
- Generate AI content you request (using third-party AI providers — see Section 5)
- Send you service-related communications (receipts, important notices)
- Publish content to your connected social media accounts only when you instruct us to
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations under Bangladesh law
We do not sell your personal information to third parties.
We do not use your data to train AI models.
We do not post to your social media accounts without your explicit action.
4. Facebook data specifically
When you connect a Facebook Page to Khansland Gigs:
What we receive from Facebook:
- Your Facebook user ID and display name
- A list of Facebook Pages you administer
- Access tokens (one for your user account, one per Page)
- The category and basic info of each Page
How we store it:
- All access tokens are encrypted at rest in our database
- Tokens are never displayed in our user interface
- Tokens are never written to log files
- Only authenticated systems involved in publishing can decrypt tokens
What we do with it:
- Show you a list of your Pages so you can choose which one to post to
- Publish content to your selected Page only when you click "Post Now" or schedule a post
- Refresh tokens automatically before they expire so your scheduled posts work
What we do not do:
- We do not read your existing posts, messages, or comments
- We do not post anything without your explicit instruction
- We do not share your Facebook data with any other user or third party
- We do not use your Facebook data for advertising
You can disconnect your Facebook account at any time from Settings → Facebook → Disconnect. This deletes all stored tokens, cancels all scheduled posts, and removes your Page list. Historical post records (what you previously published) are retained for your account history but contain no tokens.
5. Third-party services we use
To provide our services, we share limited data with these processors:
| Service | Purpose | Data shared |
|---|---|---|
| OpenRouter (AI gateway) | Run AI generations you request | The text prompt you submit |
| Anthropic (Claude) | Bangla AI generations | Same as above, via OpenRouter |
| DeepSeek | English AI generations | Same as above, via OpenRouter |
| bKash | Payment processing | Phone number, amount, transaction reference |
| Facebook (Meta) | OAuth + post publishing | Only when you connect a Page |
| Cloudflare / hosting | Site delivery, security | Standard request data |
We do not control how these third parties handle data once shared. Their own privacy policies apply. We choose providers we believe maintain reasonable security practices.
6. Data retention
- Account data: retained while your account is active. Deleted within 30 days of account deletion request.
- Generated content: retained for your history while account active. Deleted with account.
- Facebook tokens: deleted immediately when you disconnect Facebook or delete your account.
- Payment records: retained for 7 years for tax and legal compliance under Bangladesh law.
- Server logs: retained for up to 90 days, then automatically purged.
7. Your rights
You have the right to:
- Access the data we hold about you — email support@khansland.com.bd
- Correct inaccurate data — most can be edited in Settings; otherwise email us
- Delete your account and associated data — Settings → Account → Delete, or email us
- Export your data in a portable format — email us; we will provide within 30 days
- Withdraw consent for any optional processing — Settings or email us
- Disconnect any third-party connection (Facebook, etc.) at any time
We respond to all requests within 30 days. There is no charge for these requests.
8. Cookies
We use cookies for:
- Essential: keeping you logged in, remembering your language preference, preventing fraud
- Functional: remembering modal dismissals, theme preferences, recent activity
- Analytics: understanding how users navigate Khansland (anonymized)
We do not use advertising cookies. You can clear cookies in your browser at any time, but doing so may log you out and reset preferences.
9. Children
Khansland is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it.
10. Security
We protect your data using:
- HTTPS/TLS encryption for all traffic
- Encrypted storage for sensitive fields (tokens, payment references)
- Hashed and salted passwords (never stored in plain text)
- Regular security updates to our software
- Access controls — only authorized systems and the operator can access user data
No system is perfectly secure. We will notify affected users within 72 hours of discovering any security breach involving their personal data.
11. International transfers
Khansland is operated from Bangladesh. Some of our processors (OpenRouter, Anthropic, DeepSeek, Cloudflare, Facebook) are based outside Bangladesh, primarily in the United States and European Union. By using our services, you consent to your data being processed in these countries, which may have different data protection laws than Bangladesh.
12. Changes to this policy
We may update this policy as our services change. Material changes will be communicated via email or in-app notice at least 14 days before taking effect. The "Last updated" date at the top reflects the most recent revision.
13. Contact
For privacy questions, requests, or complaints:
- Email: support@khansland.com.bd
- Address: [Habib's business address]
- Operator: Habib Khan, Bangladesh
If you are not satisfied with our response, you may contact the relevant data protection authority in your jurisdiction.
Questions? Contact support@khansland.com.bd