Privacy Policy

StoreForge is a multi-store e-commerce platform. Store owners use it to run their own online shops, and shoppers use it to browse and buy products. This policy explains what personal information the platform holds, why we hold it, who can see it, and how we protect it.

1. Information We Collect

Store owner accounts

• Identity: Name, email, phone number, and password
• Store details: Store name, tagline, description, logo, banner, address, district, and social links
• Subscription: Chosen package, subscription dates, and renewal history
• Payments: Manual payment records including transaction IDs, sender account numbers, amount, and channel used (bKash, Nagad, bank transfer, etc.)

Shopper information

• Checkout details: Name, phone number, delivery address, district, and optional email or delivery note
• Order history: Products bought, quantities, prices, payment status, and delivery status

Shoppers do not need an account to buy. Orders are placed as guests with only the information needed to deliver the purchase.

Product and store content

• Product titles, descriptions, images, prices, and stock levels added by store owners
• Category titles added by store owners
• Public storefront information shoppers can see

Technical data

• IP address, browser, and device type for security and troubleshooting
• Login times for store owners, kept to protect accounts

2. How We Use Information

1. Running stores: Let store owners add products, manage stock, receive orders, and generate invoices
2. Processing orders: Record the items, compute totals, and send confirmed orders to the correct store owner
3. Subscription billing: Track which package each store is on, when it expires, and whether renewal is due
4. Manual payment verification: Let a platform admin review the transaction ID and account number a store owner submitted, and activate the store on approval
5. Security and accountability: Control access by role and keep a record of important actions

3. Who Can See What

Access is limited by role. Each store owner sees only their own store's products, orders, and reports. Platform admins see stores, subscriptions, and manual payments across the platform so they can verify payments and manage activation. Shoppers see only public storefront pages and their own order confirmation.

4. Sharing and Disclosure

• Payment gateways: SSLCommerz and similar providers receive the amount, transaction ID, and contact details needed to process a card or mobile payment
• Delivery partners: Store owners share the customer's name, phone, and address with their courier when shipping an order
• Service providers: Hosting and technology providers that operate the platform on our behalf
• Legal requirements: When required by law, court order, or a regulator

We do not sell personal information.

5. Payment Information

When a shopper pays for an order, the card or mobile wallet details are entered on the payment gateway's secure page. StoreForge does not store full card numbers or wallet PINs. We store only a transaction reference so the payment can be matched to the order.

When a store owner pays their subscription fee manually (for example by bKash), we store the transaction ID, the account number used, and the amount so a platform admin can verify the payment.

6. Data Security

• Role-based access control and authenticated access to store and admin dashboards
• Encrypted connections when data is transmitted
• Audit records of important actions such as activating a store or cancelling a subscription
• Regular review of user accounts and permissions

7. Retention

We keep store records for as long as the store is active and for a reasonable period after, so we can meet legal, tax, and dispute requirements. Order history is kept because store owners and shoppers may need it later. Past subscription records are kept so the billing trail is complete.

8. Your Rights

Store owners and shoppers may ask to see the information we hold about them, to correct inaccurate details, or to raise a concern about how it is used. Some records must be kept to meet legal, tax, or order-history requirements, and we will explain this if a request cannot be fully met.

9. Changes to This Policy

We may update this policy as the platform changes. Material changes will be announced to store owners through their dashboard.

10. Contact Us

Last Updated: October 8, 2026