DATA PROTECTION & PRIVACY

Privacy Policy

Last Updated: August 11, 2026

1. Introduction

At Web Dev Mehedi, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website or use our AI PRD generation tools.

2. Information We Collect

We collect minimal information necessary to deliver our services:

  • Google Account Information: When you sign in with Google, we receive your email address, full name, and avatar URL via secure OAuth 2.0 protocol.
  • Payment Transaction Data: When purchasing credit packages, transaction identifiers and purchase amounts are processed securely via PipraPay. We do not store raw credit card numbers or PINs.
  • Generated Project Content: PRDs, feature descriptions, and stack selections created by you are stored securely in our encrypted database infrastructure.

3. How We Use Your Information

We use your information exclusively to:

  • Authenticate your identity and manage your credit balance.
  • Process AI requests to generate PRDs, schemas, and architecture documentation.
  • Verify payment completion and prevent fraudulent activity.
  • Send critical system notifications and support updates.

4. Data Security & Storage

We employ enterprise-grade security practices to safeguard your personal data:

  • All network communication is encrypted using 256-bit SSL/TLS encryption.
  • Database access is strictly controlled via automated row-level data isolation policies ensuring only you can access your documents.
  • API keys and secret credentials are stored server-side and never exposed to client browsers.

5. Third-Party Service Providers

We collaborate with trusted service providers to operate our platform securely:

  • Cloud Storage & Authentication Infrastructure: For secure user session management and database storage.
  • Automated Payment Gateway Partner (PipraPay): For processing Bangladesh payment methods (bKash, Nagad, Rocket, Cards).
  • AI Processing Partners: For generating technical PRD documentation without sharing your personal user credentials.

6. Your Rights & Data Deletion

You have the right to request access to your stored data or request account deletion. If you wish to delete your account and associated PRD documents, please email us at privacy@webdevmehedi.com.

7. Privacy Policy Updates

We may update this policy periodically to reflect operational or legal changes. Continued use of Web Dev Mehedi after updates constitutes acceptance of the revised terms.

WINDOWS DESKTOP UTILITY

8. NexDrive — Google Drive Integration & Limited Use Disclosure

NexDrive is a native Windows desktop utility developed by Web Dev Mehedi. It allows users to mount their personal Google Drive storage as a virtual local drive on Windows using client-side filesystem technology (embedded Rclone and WinFsp).

  1. How We Access & Use Google User Data: NexDrive accesses Google Drive files (https://www.googleapis.com/auth/drive) solely to facilitate local directory browsing, file opening, file saving, and media streaming directly within Windows File Explorer.
  2. Client-Side Architecture & Data Storage: All communication occurs directly between the user's local computer and Google Drive APIs via secure HTTPS connections. NexDrive does NOT collect, monitor, store, or route user Google Drive files, directory metadata, or credentials through any external backend server or database. OAuth tokens are stored exclusively and encrypted on the user's local device.
  3. Google API Limited Use Disclosure: NexDrive's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements. We do not sell, rent, or use Google Drive user data for advertising, training AI/ML models, or unauthorized third-party sharing.