Privacy Policy

When you use RentDokan, we collect the following information:

• Account info — your name, phone number, email address (if provided), password.
• Store info — store name, logo, address, contact number, product details, bKash/Nagad merchant number.
• Customer info — when your customers place orders, their name, phone number, delivery address, and order history are collected.
• Product reviews — when a customer reviews something they bought, their rating, their words, any photos they add, the name they choose to show and which variant they bought. The phone number is never shown with a review.
• Payment info — transaction records, transaction IDs, payment status. We never store bKash/Nagad PINs or bank passwords.
• Technical info — IP address, browser, device type, and usage patterns (for analytics).

We only collect information necessary to provide our service:

• To keep your online shop running and process orders
• To send order tracking and WhatsApp notifications to customers
• To book parcels with the courier service you connect (currently Steadfast or Pathao)
• To verify payments and maintain transaction records
• To provide customer support and resolve issues
• To improve service quality and build new features
• To send the customer of a delivered order one review request, and at most one reminder, by SMS or email. The customer can turn review requests off from the review page.
• To send the server copy of each shop event to the ad platforms a shop owner has connected, only for shops whose owner has turned on ad tracking (see section 7)

We don't sell or rent your data, and we never hand it to advertisers for our own benefit. The one case in which it reaches an ad platform is when a shop owner turns on ad tracking for their own ads — section 7 describes exactly what is sent. Beyond that, limited information is shared only in the following cases:

• Payment gateways — necessary information when processing payments through SSLCommerz, bKash, or Nagad.
• Courier partners — customer name, phone, and address for parcel delivery, shared only with the courier account a merchant has connected.
• Cloud infrastructure — services like Cloudflare and AWS for data storage and hosting.
• Legal obligations — when required by applicable Bangladeshi law or court order.
• Ad platforms — Meta, TikTok or Google, only for a shop whose owner has turned on ad tracking, and only the shop events described in section 7.

Your data is transferred over encrypted connections (HTTPS/TLS). Passwords are stored using industry-standard one-way hashing. Database and file storage are encrypted at rest. That said, no online system is 100% secure — we continuously update our security posture.

Your data is retained while your account is active. If you delete your account, your data will be permanently removed within 90 days (except where retention is required by law).

As a RentDokan user, you have the following rights:

• The right to view and copy your data
• The right to correct inaccurate information
• The right to delete your account and associated data
• The right to export your data in CSV or JSON format
• The right to unsubscribe from marketing communications

To exercise these rights, please contact us (see below).

We use cookies to improve your experience and for analytics. This includes: keeping you logged in, remembering your language preference, and measuring site performance. You can disable cookies in your browser settings, but some features may not work correctly.

One more cookie is worth naming: when a visitor opens a referral link, we store the referral code in a cookie for 30 days, so that a signup can be credited to the right referrer. It holds the code and nothing else, page scripts cannot read it, and it is never used for advertising or profiling. → View the Referral Program Terms

We also use the Meta (Facebook) Pixel on this website to measure how our own advertising performs, for example whether someone who saw a RentDokan ad later created a shop. For this, Meta may set cookies and receive technical information about your browser and the pages you visit on rentdokan.com, under Meta's own privacy policy. This pixel is ours and runs only on rentdokan.com's own pages: it never receives your password or your payment details, and no order or customer data from any shop passes through it. What a shop's own pixel may send is a separate matter, described in section 7. You can limit this in your Facebook ad settings, or by blocking third-party cookies in your browser.

A shop owner can turn on ad tracking for their shop so that the ads they run on Meta (Facebook and Instagram), TikTok or Google can be measured and aimed. When a shop does this, the shop owner is the one advertising, with their own ad accounts and their own pixel. RentDokan does not advertise to you through a shop and does not use this data for anything of its own; we only pass it on, on the shop owner’s behalf. This section applies only while you are visiting a shop that has turned ad tracking on.

Such a shop may report these shop events to the ad platforms it has connected:

• Which pages you view
• Which products you look at, and what you search for
• What you add to your cart, when you start checkout and when you choose how to pay
• The order you place, with the products in it and the amount paid for the goods
• At checkout, your phone number, name, city and email (if you give one) — never in readable form, see below

Identity data is hashed (SHA-256) before it leaves our servers. The ad platform receives a fingerprint it can match against its own users, not your readable phone number or name. Your delivery address, your password and your payment details are never sent.

The pixel of a connected ad platform may set its own cookies in your browser — Meta's _fbp and _fbc, TikTok's _ttp, and Google's _ga and _gcl_au — under each platform's own privacy policy. Note that shops on a RentDokan subdomain (yourshop.rentdokan.com) share Meta's browser cookie across the whole rentdokan.com domain, so a Meta ad click on one such shop can be visible to another such shop's pixel. A shop on its own domain shares it with no one.

Visitors from the European Economic Area, the United Kingdom and Switzerland are not tracked: on those visits no pixel loads and no shop event is sent.

To object, or to ask what a shop has sent about you, contact the shop first — its contact details are on the shop's own pages. If the shop does not answer, write to us at [email protected] (section 10) and we will take it up with the shop. You can also limit ad tracking in your Meta, TikTok and Google ad settings, or by blocking third-party cookies in your browser.

RentDokan is not intended for users under 18. We do not knowingly collect personal information from children. If we learn that a child's information has been collected inadvertently, we'll delete it immediately.

This policy may be updated over time. For significant changes, we'll notify you via email or dashboard notification. The last-updated date will always appear at the top of this page.

For any privacy-related questions or requests, contact us:

• Email: [email protected]