Privacy Policy — Amar Sonod

Last updated: 2 August 2026 · Applies to Amar Sonod digital certificate services

This Privacy Policy applies to the digital service platform Amar Sonod (also known as “আমার সনদ”) operated for Union Parishad and Municipality certificate services in Bangladesh.

1. Personal information we collect

When you use Amar Sonod, we may collect name, National ID (NID) / birth registration number, address, mobile number, email, IP address, and other information needed to process certificate applications and local-government services.

We do not sell personal information to unauthorized third parties for advertising.

2. Google Sheets and Google Drive (optional office feature)

Authorized office staff may connect a Google account to Amar Sonod. This feature is optional and is not required for citizens to apply for certificates.

• Access: Only after the office staff grants Google OAuth consent.
• Use — Sheets: Application register rows (track ID, certificate type, citizen name, status, fee fields when available) may be written or updated in a Google Sheet owned/controlled by that office account.
• Use — Drive: Approved certificate PDF copies may be uploaded to a Drive folder Amar Sonod creates or the office selects. With drive.file, Amar Sonod does not request access to the user’s entire Drive.
• Store: OAuth tokens needed for API calls are stored securely for that office. Spreadsheet/folder IDs are stored so sync can continue. Content written to Sheets/Drive remains in the office Google account.
• Share: We do not sell Google user data, use it for ads, or share it with unrelated third parties. Google data is used only for the Sheets register and Drive PDF features described here and on /amar-sonod/google-workspace.

2.1 Minimum Google OAuth scopes

Amar Sonod requests only these scopes:

• https://www.googleapis.com/auth/spreadsheets — create/update the office certificate spreadsheet and append/update rows.
• https://www.googleapis.com/auth/drive.file — access only files/folders created by Amar Sonod or selected by the user; upload approved PDFs.
• https://www.googleapis.com/auth/userinfo.email — show the connected Google account email in settings.
• openid — standard OpenID Connect for the OAuth sign-in flow.

2.2 Limited Use and user control

Amar Sonod’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Staff can disconnect Google access in Amar Sonod settings or revoke access at Google Account permissions. After disconnect, Amar Sonod stops calling Google APIs for that office.

3. Browsing and logs

You can browse public pages without providing personal details. Servers may store IP address, browser type, and timing data to improve service quality.

4. Cookies

We may place cookies for sessions and service quality. You can disable cookies in your browser; some features may then not work correctly.

5. Security and contact

Digital records are protected with commercially reasonable security measures, including hosting where applicable on Bangladesh Computer Council (BCC) related infrastructure.

Privacy requests (access, correction, deletion): [email protected]

Older privacy URLs on this site remain available for other apps/products and are not removed. This page is the Amar Sonod Google OAuth verification privacy policy.