Bimafy Dealer Device Insurance Activator — privacy policy

Effective date: 25 October 2026.

Who we are

Bimafy Dealer Device Insurance Activator is provided by Bimafy Limited, House # 02 (1st Floor), Road # 23/C, Gulshan 1, Dhaka - 1212, Bangladesh. Contact: [email protected] or +8809606991991. Website: https://bimafy.com.

This policy describes a B2B device-insurance activation tool for Bimafy's authorized electronics retailers, including mobile and laptop shops. Bimafy shares an installation link with dealers, who sign in and request insurance generation for their customers using invoice screenshots or selected images. The extension is not a public consumer self-service product. Installation alone grants no dealer access. It does not authorize use of extension-derived information for unrelated purposes in Bimafy's general website policy.

Information processed

• Account authentication: your login email/mobile and password are sent to Bimafy over HTTPS to verify dealer access. The extension does not persist your password. It stores a dedicated revocable session token and your account ID/name in Chrome local extension storage.
• Dealer context: authorized dealer/channel, selected plan and salesperson are used to submit the requested insurance workflow and display permitted dealer records. Shop/channel selections are retained; the salesperson must be selected for a new sale rather than silently restored.
• User-requested invoice content: when you click capture, the extension reads the active invoice URL and captures the document or main scrolling pane. Alternatively you can explicitly select a JPG, PNG or WEBP invoice image. The image can include customer names, phone numbers, email, device model/IMEI/serial, prices, invoice/payment references and other visible page content. HTTP/HTTPS invoice URLs include query strings and fragments. Avoid capturing unrelated sensitive content or URLs containing access tokens.
• Capture tracking and workspace: capture IDs, status, attempt counts/timestamps and hashed invoice identities are stored locally to track processing and reduce duplicates. The extension retrieves dealer-authorized enrollments, receipt images, customer/device details and commission summaries from Bimafy. Local tracking does not contain stored invoice image bytes or passwords.
• Local-file references: a local invoice page path is hashed before being sent as a submission reference. File names/paths are not deliberately sent as that reference, but the screenshot itself may include any path visible inside the captured page.

The extension does not continuously read your browsing history, use the alarm to take new screenshots, or access arbitrary files without your capture/file-picker action. It can check status of previously submitted captures after the popup closes. Bimafy's servers process necessary connection/security and processing records to operate and secure the service.

Why information is used

Information is used to authenticate authorized dealers; process their requested device-insurance submissions; extract invoice fields; validate plans and customer/device information; prevent duplicates/fraud; provide review/retry, receipts, enrollments and commission summaries; and maintain the security and reliability of this workflow. Existing channel consent and insurance eligibility rules continue to apply. AI extraction can be inaccurate and does not guarantee insurance coverage.

Service providers and necessary disclosures

Invoice images are processed by Bimafy and Google Gemini for invoice-field extraction. Invoice media is stored on Amazon Web Services S3, currently configured in region ap-southeast-1. Bimafy's application/database hosting and private AWS S3 backups support the requested service and recovery. Necessary enrollment/customer information may be shared with the relevant insurance/service providers to perform the requested insurance workflow, subject to appropriate notice, authority and applicable requirements.

Information may be processed outside Bangladesh. Processor storage, processing location and retention are governed by the applicable service arrangements as well as this policy. Contact Bimafy for questions about the providers used for your invoice. We update the disclosures when the selected processors materially change.

Limited Use

Bimafy's use of information obtained through this extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension-derived user data is used only for the disclosed insurance workflow and permitted related operations, not sold, used for unrelated advertising, or used for creditworthiness/lending decisions. Transfers and human access are limited to policy-permitted purposes. Where explicit consent is required for human review, that consent must be obtained before access.

A general website marketing clause does not override this extension-specific restriction. Dealer users must have the necessary authority and provide required notices/consents before submitting customer information.

Local storage and session duration

The current implementation stores a revocable token in Chrome extension local storage restricted to trusted extension contexts. Sessions have an absolute expiry 365 days after login, unless revoked or dealer access is removed earlier. Sign-out revokes the current extension session and removes its local token. Invoice duplicate tracking remains in that browser profile after sign-out. Uninstalling the extension or clearing its storage removes local extension data, not Bimafy server records. A shared browser profile can retain local invoice tracking; use appropriate account/device controls.

Server retention, deletion and backups

Contact [email protected] to request access, correction, deletion or session revocation. Bimafy verifies identity and authority before acting. Insurance, billing, fraud-prevention and audit records may need retention where required for the service or applicable obligations, so not all records can be deleted immediately.

The current dealer-extension implementation has no fixed automatic age-based purge of capture records or their invoice images. They may remain on the server unless removed through an authorized deletion or another applicable lifecycle action. Bimafy retains insurance/enrollment evidence for ongoing service, claims, financial records, fraud prevention and audit requirements; this policy does not promise a fixed automatic deletion date. Uninstalling or signing out does not delete these records.

The standard production backup configuration keeps all restore points for 30 days, selected daily points for 365 days, weekly points for 52 weeks, monthly points for 48 months and yearly points for four years, subject to storage cleanup and any separately retained archives or required preservation. This describes configured rotation, not a guarantee that every restore point exists or that all copies are erased on an exact date. A deletion from live records does not immediately remove copies from backups. Requests are reviewed through support, including whether obligations require some records to remain; there is no dedicated self-service server-invoice deletion endpoint in the extension.

Some other Bimafy receipt-scan workflows have separate expiry rules. They do not establish an expiry for dealer-extension captures and are not represented as such here.

Security and your choices

Production extension API traffic uses HTTPS. Backend authentication and dealer ownership checks restrict access. No system is risk-free: protect your browser profile and credentials, do not share sessions, and sign out when appropriate. Capture only invoices you are authorized to submit. You may stop submitting invoices, disable/uninstall the extension or contact support. Without the necessary invoice/account information, the requested workflow cannot run.

Updates and contact

We publish the effective date and notify users appropriately of material changes. Privacy enquiries: [email protected]; +8809606991991; Bimafy Limited at the office address above.