Privacy Policy

Signup requires the owner’s name, email address, Bangladesh phone number, password, shop name, and chosen shop address. Phone is used for sign-in, shop contact, and operations. Email is used for account, security, billing, and support communication.

After signup, a merchant may add WhatsApp, Facebook, setup-assistance details, products, customers, orders, payment records, delivery settings, files, and other shop content. We also process essential device, security, request, and diagnostic data needed to operate and protect the service.

We use information to create and secure accounts, host and operate shops, provide merchant tools, process support requests, administer trials and paid access, prevent abuse, diagnose failures, and meet legal obligations.

Marketing analytics are optional. Google Tag Manager and Google Analytics 4 load only after an analytics-consent choice. Essential security and service operation do not depend on marketing consent.

We disclose only what is necessary to infrastructure, storage, email, support, payment, analytics, and delivery providers used for the requested service. A provider’s own terms may also apply when a merchant enables it.

We do not publish or sell merchant account details as a customer list. We may disclose information when required by applicable law, a valid authority request, or to protect users and the platform.

Information is retained only while needed for the account, service, security, dispute, backup, or legal purpose. Exact periods vary by record type and legal duty. Deletion from active systems may not immediately remove lawful backup, audit, fraud-prevention, or financial records.

We use access controls, tenant separation, validation, logging safeguards, and other reasonable technical and organizational measures. No internet service can promise absolute security. Some service providers may process data outside Bangladesh subject to their safeguards and applicable requirements.

You may ask to access, correct, delete, restrict, or object to processing of personal data, or withdraw optional analytics consent. Some requests may be limited by identity verification, security, contractual, recordkeeping, or legal duties.

Send a request from the account email to [email protected]. Do not send passwords, OTP codes, payment PINs, recovery codes, or other secrets.

DokanNao is a business service and is not directed to children. Policy changes will be published here with a revised effective date; material account-impacting changes may also be communicated through the service.