Privacy policy

Last updated 31 October 2026

What we keep

For shop owners: name, email, phone, and the settings, products, pages and orders you create. For a shop's customers: the name, phone, address and order details they type into a shop's order form. The shop is responsible for that data; we process it on the shop's behalf.

Order forms

When someone types a phone number into an order form, a shop on a paid plan may keep it as an "incomplete order" so it can call them. Unfinished entries are deleted after 30 days.

The shared refusal list

When a delivery is refused, a one-way keyed hash of the phone number and a count is stored so other shops can see that the number refused deliveries before. The phone number itself, names, addresses and order details are never shared between shops.

Services we send data to

• Courier companies the shop connects (Steadfast, Pathao, RedX): the delivery details of orders the shop books.
• Meta (Facebook) Conversions API, when the shop turns it on: purchase events with the phone number and first name hashed (SHA-256).
• BulkSMSBD, for the SMS the shop sends: the phone number and message.

Your choices

Shop owners can export and delete their data. Customers can ask the shop, or us, to delete their details.

Contact

support@saifbrand.com