Privacy Policy

ব্যবসায়ী ("we", "us", "our") is a business-management platform built for small and medium businesses in Bangladesh. This Privacy Policy explains what personal and business information we collect, how we use it, who we share it with, and how we protect it. By using our website or app, you agree to the practices described in this policy.

Trust is the foundation of the ব্যবসায়ী platform. We commit to:

✓ Your business data is entirely yours — we will never sell it.

✓ You can download all your data in CSV/Excel format at any time.

✓ We will never lock you into our platform (no lock-in).

✓ If a security breach occurs, we will notify you promptly.

✓ We use AI — but transparently, only to benefit your business.

• Account information: name, phone number, email, password (stored encrypted/hashed — never in plain text).
• Google sign-in data: if you sign up via Google, we receive your name, email, and profile picture from Google.
• Business information: business name, owner name, address, employee count, sales channels, tagline, Facebook Page details (if connected).
• Business transaction data: products, customers, sales, purchases, payments, stock, and ledger data you enter into the platform — this is the core content of our service and remains your business's own data.
• Usage and log data: login times, device/browser information, IP address, and audit logs of who changed what in your account.
• Communication data: content of any messages you send us through support channels.

We use your information to: (a) provide and operate the service (e.g. dashboards, reports, notifications); (b) verify your account and secure it (OTP, login); (c) provide customer support; (d) analyze and improve the service; (e) manage billing and subscriptions; (f) comply with legal obligations. We never sell your business transaction data (products, customers, sales, etc.) for advertising or marketing purposes.

We do not share your information with third parties except:

• Service providers: our SMS gateway provider, email provider, and cloud hosting provider (for server/database hosting) — each receives only the minimum data necessary to perform their function.
• Google: authentication data is exchanged with Google if you sign in via Google.
• Legal requirements: in response to a court order or legal obligation.
• Business transfers: in connection with a merger, acquisition, or asset sale (you will be notified in advance in such cases).

ব্যবসায়ী may connect to the following third-party services (only with your permission):

• Facebook / Meta: to sync messages and orders from your Facebook Page. Only the necessary API connection data is sent to Meta.
• WhatsApp Business: to send receipts, order updates, and notifications to your customers.
• Payment gateways (bKash, Nagad, Card): for payment processing. Card or mobile banking credentials are never stored on ব্যবসায়ী's servers.
• Delivery partners: for order tracking and delivery (e.g. Pathao, Steadfast).

These integrations are only activated when you set them up yourself. Any integration can be disconnected at any time from Settings.

ব্যবসায়ী uses AI-powered analysis and recommendations to help your business grow. We are fully transparent about this:

• Personalized recommendations are generated from your own business data — not from other businesses' data.
• AI suggestions assist decision-making, but the final decision is always yours.
• Your data is not shared with third parties for AI model training.
• Intelligence features can be turned off in Settings if you prefer not to use them.

We take the following measures to protect your information:

• Encrypted connections (HTTPS): all data transfers occur over encrypted channels.
• Strong password hashing: your password is secured using the Argon2 algorithm — even we cannot read your password.
• Tenant isolation: each business's data is stored completely separately — no other business can ever see your data.
• Role-based access control (RBAC): your employees can only view and modify data within their designated permissions.
• Audit logs: a complete record is kept of who made what changes in your account.
• Secure backups: regular encrypted backups are taken to prevent data loss.
• Continuous monitoring: suspicious activity and unusual access attempts are automatically detected.
• International cloud servers: our servers and data storage run on international cloud providers (such as AWS or equivalent) — meaning your data may be processed outside Bangladesh. We ensure these providers comply with international security standards.

That said, no method of transmission or storage over the internet can be guaranteed 100% secure.

We retain your data while your account is active.

• Subscription cancellation: cancelling your subscription moves your account to an "inactive" state; data is retained for 90 days so you can reactivate if you choose.
• Permanent deletion: you may request permanent deletion of your entire account and all data (email info@babosayee.shop). All your data will be permanently deleted within 30 days of receiving your request.
• Legal exceptions: applicable Bangladeshi law (such as income tax, VAT, or commercial record-keeping obligations) may require certain data to be retained for a specified period.
• Backup removal: even after permanent deletion, complete removal from encrypted backups may take additional time (up to 90 days).

If a security breach occurs that affects your information, we will:

• Notify you by email, SMS, and in-app notification within 72 hours of becoming aware of the incident.
• Clearly communicate what information was affected, what steps we have taken, and what you can do yourself.
• Notify relevant authorities as required by applicable law.

You have full control over your data:

• View & correct: you can view and update all your information directly within the platform.
• Export (no barriers): all your business data (products, sales, customers, ledger) can be downloaded in CSV or Excel format — at any time, for any reason. No extra charge, no approval required.
• Delete: you can request permanent deletion of your account and all data.

For any of these requests, email info@babosayee.shop or call 01805-023878.

We use cookies necessary to maintain your login session and platform functionality. You can control cookies through your browser settings, though this may affect the platform's functionality.

ব্যবসায়ী is not intended for individuals under 18. We do not knowingly collect information from children.

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.

Q: Who owns my business data?

A: You do. Everything you enter into the platform belongs entirely to you. ব্যবসায়ী only processes that data to provide you with the service.

Q: Does ব্যবসায়ী sell my data?

A: No, never. We do not sell, rent, or use your business data (products, customers, sales, etc.) for advertising purposes to any third party.

Q: Can I take my data with me at any time?

A: Yes. Your complete data can be downloaded in CSV/Excel format — at any time, for free. We will never lock you into our platform.

Q: Can ব্যবসায়ী employees see my data?

A: Only in a limited way. Our support team can only access information necessary to resolve a specific issue, and every such access is recorded in the audit log.

Q: Where is my data stored?

A: On international-grade cloud servers (AWS or equivalent) that hold the highest security certifications. Servers may be located outside Bangladesh, but your data is always encrypted.

If you have questions about this policy, contact us at:

Website: babosayee.shop · Email: info@babosayee.shop · Phone: +880 1805-023878