Privacy Policy

1. Who we are

FcommerceBD is operated by [LEGAL COMPANY NAME], [REGISTERED ADDRESS], Bangladesh. For any privacy question, contact [SUPPORT EMAIL].

2. Information we collect

• Account information — your name, email address, phone number and business name.
• Business data you enter — products, prices, orders, invoices, expenses, suppliers and customer records including customer names, phone numbers and delivery addresses.
• Facebook data — when you connect a Page, we store the Page ID, name, category, profile picture, follower count, and the access tokens needed to publish on your behalf.
• Usage data — logs of actions taken in the dashboard, used for support and abuse prevention.

3. How we use it

We use your data to operate the service: to display your dashboard, publish posts you create to your connected Page, send SMS campaigns you initiate, pass delivery details to your chosen courier, process subscription payments, and provide support.

4. Facebook permissions

We request the minimum permissions needed to publish on your behalf: pages_show_list to list the Pages you manage, pages_read_engagement to read basic Page details, and pages_manage_posts to publish posts you create. We never post without your action, and we never read your personal profile, friends or private messages. Access tokens are encrypted at rest and are never exposed to the browser.

5. Sharing your data

We do not sell your data. We share it only with the service providers needed to deliver the features you use: Meta (Facebook publishing), your SMS gateway, courier partners you select such as Steadfast, and payment providers such as bKash and SSLCommerz. Each processes data under its own terms.

6. Your customers' data

Customer records you store belong to you. We process them on your behalf. You are responsible for having a lawful basis to collect and use them, including consent for SMS marketing.

7. Retention and deletion

We keep your data while your account is active. You can delete individual records at any time from the dashboard. Disconnecting a Facebook Page immediately deletes the stored tokens for that Page. To delete your entire account and its data, email [SUPPORT EMAIL] and we will action it within 30 days.

8. Security

Data is transmitted over HTTPS and access tokens and payment credentials are encrypted at rest. No system is perfectly secure; we ask that you use a strong, unique password and control who you invite as staff.

9. Your rights

You may request a copy of your data, ask us to correct inaccurate information, or ask us to delete your account. Contact [SUPPORT EMAIL].

10. Changes

We may update this policy. Material changes will be notified in the dashboard.