Privacy Policy
Last updated: September 2026 • Effective across all BSmart shopping, sourcing & multi-vendor operations.
Bcrypt 12-Round Hashing
Zero plaintext password storage
IDOR & XSS Protected
Strict tenant & session isolation
No Third-Party Ad Selling
Your shopping habits remain private
1. Information We Collect
When you use BSmart, register an account, purchase products, or register as a certified vendor, we collect:
- Contact Information: Name, delivery address, verified Bangladeshi mobile number (+880), and email address.
- Order & Transaction History: Item SKUs, quantities, BDT order amounts, cash-on-delivery or card payment records.
- Merchant Verification Documents: Trade License number, BIN/TIN registration, and settlement bank credentials.
- Technical Logs: IP address, device fingerprints, and session telemetry used strictly for automated fraud detection and rate limiting.
2. How We Use & Protect Your Data
Your data is never sold, leased, or rented to external marketing brokers. We utilize collected information solely to:
- Dispatch and fulfill marketplace orders to your specified destination through verified delivery partners.
- Calculate and settle accurate weekly merchant payouts and VAT-compliant proforma invoices.
- Enforce platform security: prevent automated credential stuffing, brute-force exploits, and unauthorized IDOR data retrieval.
- Send critical transactional notifications (order confirmation, courier dispatch, dispatch OTP, settlement statements).
3. Data Retention & User Rights
You maintain full ownership over your account data. Under Bangladesh Digital Security regulations and consumer protection frameworks, you may request an export of your order history, modify your delivery addresses via your profile settings, or request full account deactivation by contacting our privacy compliance officer at privacy@bsmart.com.bd.