Introduction

Welcome to Karbari App ("we," "us," "our"). We provide a business automation software designed to streamline e-commerce and f-commerce operations, helping you manage everything from order processing and delivery tracking to inventory management (our "Service").

This Privacy Policy is our agreement with you, the merchant, and outlines how we collect, use, and protect personal data on your behalf. It also details the measures we take to secure your information and explains your rights regarding your data. This policy applies to our website, software, and mobile applications. By using our Service, you agree to the practices described in this policy.

Your privacy is a matter of trust, and we are committed to protecting it. We will only collect and use your information as described here and only when it is necessary to provide you with our services.

1. Information We Collect and Why

To provide our Service, we process personal data that you make available to us. We are committed to the principle of data minimization and only process the minimum personal data required for our app to function.

The data we collect is essential to process the complete online order lifecycle. This may include:

• Personal Identification Information: Your customer's name, title, email address, phone number, and postal/delivery address.
• Business Information: Order details, product information, and inventory data related to your business operations.
• Financial Information: Payment details or bank account details required for processing transactions.
• Technical Information: IP addresses and usage data related to how you interact with our app.

We use this information strictly to:

• Administer your account and process orders on your behalf.
• Facilitate financial transactions.
• Improve the user experience and customize our app for your needs.
• Provide customer support.
• Send you relevant information about our services, which you can opt out of at any time.

2. Data Processing and Purpose Limitation

We will only process personal data for the purposes stated in this policy. We will not use the data for any other purpose without your explicit consent.

• Third-Party Sharing: We need to share your customer's data with courier companies (e.g., Pathao, Steadfast) to fulfill deliveries. This action is initiated by you within the app when you trigger the "send to courier" function.
• Automated Decision-Making: We do not use personal data for automated decision-making processes that could have legal or similarly significant effects on individuals. If we were to implement such features, we would provide an option for individuals to opt out.
• Data Sales: We will not "sell" your customers' personal data as defined by applicable laws and regulations. We respect and will apply any customer decisions to opt out of data sharing.
• Customer Consent: As our user, you are responsible for obtaining appropriate consent from your customers. We will respect and apply the customer consent decisions that you manage and pass on to us through the Service.

3. Data Retention and Security

We have implemented robust technical and security measures to protect your data from unauthorized access, loss, or destruction.

• Data Retention: We apply retention periods to ensure personal data isn’t kept for longer than needed to fulfill our service obligations to you and to comply with applicable laws.
• Encryption: All personal data is encrypted both in transit and at rest. This helps prevent unauthorized access even if our physical infrastructure is compromised.
• Data Backups: By default, we perform daily encrypted backups of your data to ensure business continuity. For businesses requiring more frequent protection, we offer hourly encrypted backup options for an additional cost.
• Access Control: We limit internal staff access to protected customer data on a strict "need-to-know" basis. All staff accounts are protected by strong password policies, and we maintain an access log to create an audit trail of any activity related to data access.
• Secure Environments: We maintain a strict separation between our test and production data environments to prevent personal data from leaking into less secure environments.
• Data Loss Prevention: We have a comprehensive data loss prevention strategy that combines technical controls and internal policies to protect against unauthorized data extraction.
• Incident Response: We have a security incident response policy in place to ensure we can respond to any security incident or data breach in a timely and effective manner.

4. Cookies and Analytics

We use cookies—small text files stored on your device—to enhance your experience. Cookies help us recognize your IP address, saving you time when you use our Service. Our website also uses Google Analytics to analyze how users interact with our site, helping us improve our service. By using our app and website, you consent to the processing of your data by Google for these purposes.

5. Data Transfer

Your information may be transferred to and maintained on computers located outside of your country, where data protection laws may differ. Your consent to this Privacy Policy represents your agreement to that transfer. Karbari App will take all reasonable steps to ensure that your data is treated securely and in accordance with this policy.