Privacy Policy

Signup requires the owner’s name, email address, Bangladesh phone number, password, shop name, and chosen shop address. Phone is used for sign-in, shop contact, and operations. Email is used for account, security, billing, and support communication.

After signup, a merchant may add WhatsApp, Facebook, setup-assistance details, products, customers, orders, payment records, delivery settings, files, and other shop content. We also process essential device, security, request, and diagnostic data needed to operate and protect the service.

We use information to create and secure accounts, host and operate shops, provide merchant tools, process support requests, administer trials and paid access, prevent abuse, diagnose failures, and meet legal obligations.

DokanNao uses Meta Pixel and Conversions API for website visits, registration, trials, shop setup, support and subscription events. Measurement and account matching are on by default unless you switch them off with the analytics preferences control below. For each eligible server event, we include available account information belonging to the authenticated shop owner: email, phone with country code, first and last name, a DokanNao-specific account identifier, and supported gender and date of birth if the owner supplied them. We normalize and SHA-256 hash these values before sending them to Meta; hashes remain personal data and allow Meta to match events with its accounts for ad attribution, measurement and advertising.

While measurement is on, events also include available Meta browser/click IDs (_fbp/_fbc), trusted request IP and browser user agent without hashing, as Meta requires. Browser events run only on reviewed pages; server URLs omit query strings. Subscription events include relevant actual plan, amount, currency and opaque transaction references. We do not invent missing profile or click data, infer an owner address from their shop, or send Facebook Login IDs without a real connection. Raw contact/profile values, passwords, OTPs, payment credentials, messages, customer lists and arbitrary form contents are not sent by this platform integration. Custom tag-manager containers are disabled. Encrypted server context expires after 35 days; Meta cookies may last up to 90 days. Campaign context is retained for up to 35 days and acquisition milestones for up to 400 days, separately from financial records. Switching measurement off stops new optional browser collection; once synchronized from an authenticated owner session, it also suppresses pending server events and clears saved matching context. Already-sent events cannot be recalled through the browser preference. Essential business records remain.

We share only the information needed to provide the requested service with our infrastructure, storage, email, support, payment, analytics, and delivery providers. If a shop owner enables a provider, that provider’s own terms may also apply.

We do not publish or sell merchant account details as a customer list. We may disclose information when required by applicable law, a valid authority request, or to protect users and the platform.

We keep information only as long as it is needed for the account, service, security, disputes, backups, or legal duties. The period depends on the type of record and the law that applies. Deleting information from active systems may not immediately remove records we can lawfully keep for backups, audits, fraud prevention, or financial purposes.

We limit who can access data, keep each shop’s data separate, check incoming information, and protect logs, alongside other reasonable technical and organizational measures. No internet service can promise complete security. Some providers may process information outside Bangladesh under their safeguards and the requirements that apply.

You can switch analytics and advertising measurement off on this device at any time with the analytics preferences control below, or ask to see, correct, delete, or limit the use of your personal information, object to its use, or withdraw consent for optional analytics. We may need to check your identity first. Security, contracts, recordkeeping, or legal duties may limit what we can do.

Send a request from the account email to [email protected]. Do not send passwords, OTP codes, payment PINs, recovery codes, or other secrets.

DokanNao is a business service and is not directed to children. Policy changes will be published here with a revised effective date; material account-impacting changes may also be communicated through the service.