Privacy Policy
Last updated: February 19, 2026
BinduSoft ("we", "us", or "our") operates Shop Builder for Web (SBW) (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully.
1. Information We Collect
1.1 Information You Provide
- Account & Store Registration: Business name, owner name, phone number, email address, and selected plan when you apply for a store.
- Contact Forms: Name, email, phone, and message when you submit a contact or inquiry form.
- Store Data: Products, orders, customer details, banners, and other content you upload while managing your store.
- Payment Information: Billing details required for subscription payments (processed via third-party payment processors; we do not store raw card data).
1.2 Automatically Collected Information
- Log Data: IP address, browser type, pages visited, time and date of access, and referring URLs.
- Cookies & Tracking: Session cookies for authentication; analytics cookies to understand usage patterns. You may disable cookies in your browser settings.
- Device Information: Operating system, device type, and screen resolution.
2. How We Use Your Information
- To set up, operate, and maintain your store on the platform.
- To communicate with you regarding your account, updates, and support requests.
- To process subscription payments and send billing notifications.
- To send onboarding and credential emails when your store is activated.
- To respond to contact form submissions and consultation requests.
- To monitor and improve the performance, security, and reliability of the Service.
- To detect and prevent fraud, abuse, and unauthorized access.
- To comply with applicable laws and regulations of Bangladesh.
3. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:
- Service Providers: Third-party vendors who help us operate the platform (e.g., Cloudinary for image hosting, Resend for transactional email, MongoDB Atlas for database hosting). These providers are bound by confidentiality obligations.
- Legal Requirements: If required by law, court order, or government authority in Bangladesh.
- Business Transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
- With Your Consent: For any other purpose with your explicit consent.
4. Data Storage & Security
Your data is stored on cloud infrastructure (MongoDB Atlas) hosted in secure data centers. We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit.
- Isolated database per store — your store data is never mixed with another merchant's data.
- Password hashing using bcrypt.
- Rate limiting and intrusion detection on all API endpoints.
No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Upon termination of your subscription:
- Store data (products, orders, etc.) may be retained for up to 30 days before permanent deletion.
- Contact form submissions are retained for up to 12 months for business reference.
- You may request earlier deletion by contacting us at bindusoftltd@gmail.com.
6. Your Rights
Depending on applicable law, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Withdraw consent where processing is based on consent.
- Lodge a complaint with the relevant data protection authority.
To exercise any of these rights, contact us at bindusoftltd@gmail.com.
7. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page or by email. Continued use of the Service after changes constitutes your acceptance of the updated policy.
10. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us:
