Legal

Privacy Policy

Draft — under legal review.

Data we collect

  • Account: name, email, phone, business name, business category, country.
  • KYC: documents you upload (NID, TIN, trade license, photographs).
  • Usage: server logs, error reports, product analytics events.

How we use it

To deliver the service, verify identity, communicate with you, and comply with applicable law. We do not sell personal data.

Where it lives

See Security for data residency and encryption details.

Retention

Account data is retained while your account is active and for 7 years after closure to satisfy financial record-keeping. You may request deletion at privacy@merchant.bd; we will delete what we are not required to retain.

Your rights

Access, correction, deletion (subject to retention obligations), portability. Email privacy@merchant.bd.

Sub-processors

Hosting, observability, email delivery. List available on request.