How we protect your data

What data protection means here

It means three things. Your files stay in your own systems. One named person works on them. They are wiped when the job is done.

The rest of this page is the detail behind those three lines. No vague words, no badges we have not earned.

We work in your systems, not on copies

Where we can, we work inside your own tools. Your Drive. Your CRM. Your store.

That way the files never leave your control. You can see what we did. You can cut our access off in one click.

When a file has to be sent to us, we delete it as soon as the job is done.

One named person, not a pool

Each job has one person on it. You know their name.

A trained backup knows your account for sick days and holidays. That is two people, not twenty.

No one else on the team can open your files.

We sign an NDA before we start

We sign your NDA before you send us a thing. Not after. Not when you ask.

If you do not have one, we send ours. It is short and it is plain.

Each person on the team signs a written pledge when they join us.

How we get access to your accounts

We ask for the least access that will do the job. Nothing more.

• We use delegated access where the tool has it. Gmail and Google Workspace both do.
• We never ask for your password by email or by chat.
• We ask for a staff or user account, not an owner account.
• We use two-step login on every work account.
• You can cut our access at any time. You do not have to tell us first.

Where our team works from

Myfriendico is US-based. Our staff work from Bangladesh, on US hours.

We put that on this page rather than bury it in an FAQ. You would find out in the end, and you should hear it from us.

Work is done on locked devices. Work logins are held in a password manager, not in a note or a shared file.

When the job ends

We delete the files we hold. Drafts and downloads go too.

We keep the invoice and a short job note. That is all we need for our books.

Ask us to delete sooner and we will do it the same day.

What we will not do

These are the data protection promises clients ask about most. Every one of them is firm.

• We will not sell or share your data. Not with anyone.
• We will not use your files to train any AI tool.
• We will not work from a login that several people share.
• We will not show your work as a sample unless you say yes first.
• We will not take work that is covered by HIPAA. We would rather say no than get it wrong.

If something goes wrong

We tell you the same day we find out, in writing.

We tell you what happened, what was in it, and what we have done since.

We would rather lose the job than hide a problem from you.

Your legal rights

This page sets out our data protection practice, day to day. It is a promise, not a contract.

Your legal rights sit in our privacy policy, and the terms of the work sit in our terms page.

Questions we get asked

Do you sign my NDA, or yours?

Yours, if you have one. Ours if you do not. Either one works for us.

Will you sign a data processing agreement?

Yes. Ask for it before the work starts and we will send one over.

Can you work on health records?

No. We do not take work that falls under HIPAA. Ask us and we will say no.

What if I want my files back?

Ask. We send them to you and then delete our copies.

Who owns the work you do for me?

You do, from the moment it is done. That is written into our terms.

Can I audit how you hold my data?

Yes. Ask what you like and we will answer it. If we cannot do a thing, we will say so.

Ask before you send a file

If there is a rule your firm needs us to follow, tell us up front. We would rather set it out now than guess later.

Ask us a questionSee our services

Related: privacy policy · terms and conditions · our services

Myfriendico, a business operated by MD Sultan Mahmud Sarker in New York, United States.