Privacy Policy

Signup requires the owner’s name, email address, Bangladesh phone number, password, shop name, and chosen shop address. Phone is used for sign-in, shop contact, and operations. Email is used for account, security, billing, and support communication.

After signup, a merchant may add WhatsApp, Facebook, setup-assistance details, products, customers, orders, payment records, delivery settings, files, and other shop content. We also process essential device, security, request, and diagnostic data needed to operate and protect the service.

We use information to create and secure accounts, host and operate shops, provide merchant tools, process support requests, administer trials and paid access, prevent abuse, diagnose failures, and meet legal obligations.

Analytics and ad measurement are optional. After consent, DokanNao’s Meta Pixel and Meta Conversions API send reviewed website, registration, trial, shop-setup and subscription events. Browser events run only on approved pages and URL parameters. Server events use a fixed query-free URL, browser user agent and available Meta _fbp/_fbc identifiers. If the operator enables advanced matching, the server sends SHA-256 hashes of account email, phone and account identity; trusted client IP is separately configurable. Subscription events contain the amount charged, currency, plan and a pseudonymous transaction reference. We do not send passwords, OTPs, payment credentials, messages or arbitrary form contents. Custom tag-manager containers are disabled.

With consent, we preserve the first campaign touch and later campaign touch, safe UTM/ad labels, a restricted landing path and a random browser identifier for up to 35 days. Encrypted server matching context expires after 35 days; Meta click cookies may last up to 90 days. Internal acquisition records use a hashed browser identifier and retain business milestones for up to 400 days, separately from financial source records. Withdrawal stops future optional collection and, when synchronized from an authenticated owner session, suppresses pending server events and deletes saved matching context. Events already sent cannot be recalled by the browser preference. Essential account, trial, setup and payment records remain necessary to operate the service.

We share only the information needed to provide the requested service with our infrastructure, storage, email, support, payment, analytics, and delivery providers. If a shop owner enables a provider, that provider’s own terms may also apply.

We do not publish or sell merchant account details as a customer list. We may disclose information when required by applicable law, a valid authority request, or to protect users and the platform.

We keep information only as long as it is needed for the account, service, security, disputes, backups, or legal duties. The period depends on the type of record and the law that applies. Deleting information from active systems may not immediately remove records we can lawfully keep for backups, audits, fraud prevention, or financial purposes.

We limit who can access data, keep each shop’s data separate, check incoming information, and protect logs, alongside other reasonable technical and organizational measures. No internet service can promise complete security. Some providers may process information outside Bangladesh under their safeguards and the requirements that apply.

You can ask to see, correct, delete, or limit the use of your personal information, object to its use, or withdraw consent for optional analytics. We may need to check your identity first. Security, contracts, recordkeeping, or legal duties may limit what we can do.

Send a request from the account email to [email protected]. Do not send passwords, OTP codes, payment PINs, recovery codes, or other secrets.

DokanNao is a business service and is not directed to children. Policy changes will be published here with a revised effective date; material account-impacting changes may also be communicated through the service.