Privacy policy

This policy covers two groups of people: merchants — anyone with a ShopZen account who runs or helps run a store — and shoppers, who buy from stores built on ShopZen.

For shoppers, the store you buy from decides what it does with your order details; ShopZen stores and processes them on the store's behalf. Questions about a particular order are best sent to that store first.

From merchants:

• Your name, email address and, if you add it, your mobile number.
• Your password, stored only as a one-way hash that no one can read back.
• What you put in your store: its name, products, photos, pages, settings and your team members' email addresses.
• A record of changes made in the store (who did what, and when), including the IP address the change came from.
• Plan payments — the amount, date and status. Card and wallet details are entered on the payment provider's page and never reach our servers.

From shoppers:

• The name, phone number, delivery address and, where the store asks for it, email address you enter at checkout.
• What you ordered, the total and the order's progress.

• To run your account and store, and to deliver orders to the right merchant.
• To send emails you need: confirming your email address, resetting your password, team invites, order confirmations for shoppers, receipts, and the store alerts each merchant chooses in Settings → Notifications.
• To keep the service secure — for example, limiting repeated sign-in attempts and signing everyone out when a password changes.
• To answer you when you contact us.

• A store's team sees that store's orders, customers and products. What each person can change depends on their role (owner, admin or staff). Team members don't see each other's IP addresses.
• Service providers we rely on to run ShopZen — hosting, email delivery and payment processing — only for the job they do for us.
• Authorities, when Bangladeshi law requires it.

We don't sell personal information, and we don't show ads.

We only use what's needed for the product to work:

• Sign-in cookies that keep you logged in to your dashboard (up to 30 days unless you log out).
• Two small preferences: the store you last opened and whether the sidebar is collapsed.
• In your browser's storage: your light or dark setting, and — on stores — your cart and, if you choose, your checkout details for next time.

There are no advertising or cross-site tracking cookies.

• Account details: for as long as your account is open.
• When you delete your account, your name, email address and phone number are erased straight away. Orders you handled stay in those stores' history, shown as “Deleted user”, because the store needs its records.
• A closed store's orders, products and customers are kept so the owner can come back to them. Ask us if you want them removed.
• Links we email expire: password resets after 30 minutes, email confirmations after 24 hours, team invites after 7 days.

• Change your name, phone number, email address and password any time in Account.
• Choose which store alerts you get, in the app and by email, in each store's Settings → Notifications.
• Delete your account in Account → Delete account.
• Shoppers can ask the store they ordered from to correct or remove their details, or write to us at [email protected].

Passwords and one-time links are stored as one-way hashes, sign-in tokens are kept in secure cookies that page scripts can't read, and every store's data is separated from every other store's. No system is perfect; if something goes wrong that affects your information, we'll tell you.

If this policy changes in a way that matters, we'll email account holders before it takes effect. Questions: [email protected].