Legal
Privacy Policy
Draft — under legal review.
Data we collect
- Account: name, email, phone, business name, business category, country.
- KYC: documents you upload (NID, TIN, trade license, photographs).
- Usage: server logs, error reports, product analytics events.
How we use it
To deliver the service, verify identity, communicate with you, and comply with applicable law. We do not sell personal data.
Where it lives
See Security for data residency and encryption details.
Retention
Account data is retained while your account is active and for 7 years after closure to satisfy financial record-keeping. You may request deletion at privacy@merchant.bd; we will delete what we are not required to retain.
Your rights
Access, correction, deletion (subject to retention obligations), portability. Email privacy@merchant.bd.
Sub-processors
Hosting, observability, email delivery. List available on request.