Privacy Policy — Alaminify

Alaminify ("we", "us", "our") operates a multi-tenant e-commerce SaaS platform for Bangladeshi merchants. This policy explains what personal and business data we collect, how we use it, and the choices you have. By using Alaminify you agree to this policy.

1. Information we collect

Account & business data

Name, email, phone number, password (hashed)
Business name, address, tenant/storefront configuration
Team members and their assigned roles

Operational data you store

Products, inventory, orders, invoices, customers, suppliers
Manufacturing recipes, BOMs, accounting/ledger entries
Storefront content, themes, page settings

End-customer data (collected by your storefront)

Buyer name, phone, shipping address, order history
You, the merchant, are the data controller for this data; Alaminify is the processor.

Automatically collected

IP address, browser type, device info, timestamps
Usage analytics, error logs, audit trails
Cookies for session management and preferences

2. How we use your information

To provide, operate, and improve the Alaminify service
To process payments via integrated gateways (SSLCommerz, bKash, Nagad, etc.)
To send transactional emails (order confirmations, password resets, billing)
To detect fraud, abuse, and enforce our Terms
To comply with legal obligations under Bangladeshi law

3. Data sharing

We do not sell your data. We share data only with:

Sub-processors: hosting (Lovable Cloud / Supabase), payment gateways, courier services (Pathao, RedX, Steadfast), email providers — strictly for delivering the service.
Authorities: when required by valid legal process in Bangladesh.
Successors: in case of merger or acquisition, with notice.

4. Data security

Bank-grade encryption in transit (TLS) and at rest
Row-level security: tenant data is strictly isolated
Daily backups; access logs and audit trail
Limited employee access on a need-to-know basis

5. Data retention

We retain your data while your account is active. After account closure we keep data for up to 90 days for recovery, then permanently delete it — except where retention is required by law (e.g., tax/accounting records, typically 5 years).

6. Your rights

You may at any time:

Access, correct, or export your data from the dashboard
Request deletion of your account and associated data
Withdraw consent for marketing communications
Lodge a complaint with the relevant Bangladeshi data protection authority

7. Cookies

We use essential cookies for authentication and session management, and optional analytics cookies (Google Analytics, Meta Pixel — only if you configure them on your storefront). You can disable non-essential cookies in your browser settings.

8. Children

Alaminify is not intended for users under 18.

9. Changes to this policy

We may update this policy. Material changes will be communicated via email or in-app notice at least 14 days before taking effect.

10. Contact

Questions or data requests: shapno.buz@gmail.com. Jurisdiction: Bangladesh.