How we handle your data

Last updated 12 October 2026

BizTrackBD is online store software. There are two kinds of people whose data we hold: the store owners and staff who use BizTrackBD, and the customers of those stores. This page explains both.

Store owners and staff

When you open a store we keep your name, email address and mobile number, your store name and address, your plan and payment records (the bKash or Nagad TrxID you send us and its status), and what you do in the admin (an audit log of changes, so you can see who did what). We use this to run your store, to bill you, to contact you about your account, and to keep the service safe.

Your store's customers

Customers give a store their name, phone number, address and order details so the store can deliver. Each store owns its customers' data and decides what to do with it; BizTrackBD holds it on the store's behalf and only to provide the service. One store can never see another store's customers: every store's data is separated in the database itself, not just in the application.

To help stores avoid fake and abandoned orders, we keep a shared delivery record for each phone number that holds only a one-way scrambled form of the number (a hash) and counts of delivered, returned and refused parcels. It does not contain names, addresses or what was bought, and the number cannot be read back from it.

Messages

We send text messages and emails for sign-in codes, order updates a store has switched on, and account notices. A customer can opt out of a store's marketing texts by replying as instructed in the message. We do not sell phone numbers or email addresses.

Keys and passwords

Courier and payment keys that a store adds are encrypted and are never shown again. We do not store card numbers: stores are paid directly by customers (cash on delivery, or to the store's own bKash or Nagad), and your plan is paid to us by bKash or Nagad.

Who else handles data

We use a small number of providers to run the service: hosting (Vercel), the database, sign-in and file storage (Supabase), email (Brevo) and text messages (sms.net.bd). They process data only to provide those services. Couriers a store connects (Steadfast, Pathao, RedX) receive the delivery details needed to collect and deliver a parcel.

Cookies

We use cookies that keep you signed in and remember your language and cart. Stores may add their own advertising pixels (for example Meta); that is the store's choice and the store's responsibility to tell its customers.

How long we keep it

We keep a store's data while the account is open. If a plan is not paid the store goes offline and then locked, but the data is kept so the owner can pay and return, or download it. You can ask us to delete your account and your store's data and we will, apart from records we must keep for accounting or the law.

Your choices

You can ask to see, correct, export or delete your data, or object to how it is used. Use the contact page. Customers of a store should ask the store first; we will help the store respond.

Changes

If this page changes in a way that matters, we will tell store owners by email before it applies.