Privacy Policy

1. Who this policy covers

MakeEstore is a platform. Three groups of people have information with us, and we treat each a little differently:

• Visitors of this website (makeestore.com).
• Merchants: store owners and their staff who sign up and use the MakeEstore dashboard.
• Shoppers: people who buy from a store built on MakeEstore. The store owner decides what to sell and who to sell to, so for shoppers' information the store owner is mainly responsible, and MakeEstore processes it on the store's behalf (see section 5).

2. Information we collect

Visitors of this website:

• Campaign tags in the link you arrived from (for example utm_source). We keep them only in your browser's session storage so that your sign-up can be credited to the right campaign.
• Simple interaction events, such as which sign-up button was clicked. For the store-name box we record only whether a valid name was typed and its length. The text you type is not recorded.
• Basic technical data our hosting servers log automatically, such as IP address, browser type and the pages requested.

Merchants and their staff:

• Account details: name, email address, optional phone number, and your password. The password is never stored as plain text. It is stored only as a salted hash.
• Sign-in information: email verification status, last login time, failed login attempts, one-time login codes (stored as hashes), and, if you use it, your Google sign-in identifier.
• Session information: for each signed-in device we keep the device type, browser and IP address, so you can see and end your sessions.
• Store details: store name, subdomain, custom domain, logo, favicon, social links, shop policies and theme settings.
• Store content you create: products, images, categories, coupons, banners, delivery settings, orders, returns and staff accounts.
• Plan and billing information: your plan, billing period, invoices (amounts, VAT, dates) and payment references such as an SSLCommerz transaction ID or a bKash transaction ID you submit. We do not store card numbers.
• Integration credentials you choose to add, such as payment gateway keys, SMS gateway settings and courier details. These are stored encrypted.
• SMS records: campaigns you send, message text and the recipient phone numbers.
• Activity (audit) log: which dashboard actions were taken, by whom, what changed, plus IP address and browser.
• Messages you send us when you ask for support.

Shoppers (collected through a store):

• Name, email address, phone number and delivery addresses.
• Orders, order status, delivery details, return requests and refunds.
• Payment status and the payment reference or transaction ID from the payment method used. Card numbers are not stored by MakeEstore.
• Cart, wishlist and compare lists, and product reviews they write.

3. How we use information

• To provide, run and secure the service: creating accounts, signing you in, showing stores, processing orders and keeping each store's data separate.
• To manage plans and billing, issue invoices and confirm payments.
• To send service messages such as email verification, password reset, login codes and important notices.
• To send SMS and other messages that a store owner asks us to send to their own customers.
• To give support and to find and fix problems.
• To prevent fraud, abuse and security incidents, and to keep records of dashboard activity.
• To understand how the website is used and to improve it.
• To follow the law and respond to valid legal requests.

We do not use shoppers' information for our own marketing.

4. Cookies and browser storage

This website does not set advertising cookies. It uses your browser's session storage only to remember campaign tags (see section 2), and it is cleared when you close the tab.

The merchant dashboard uses secure session tokens to keep you signed in. You can end sessions from your account. If we add analytics or other tools to this website in the future, we will update this policy and, where the law requires it, ask for your consent.

5. Shoppers' information: the store owner's role and ours

When a shopper buys from a store, the store owner decides why and how that shopper's information is used. MakeEstore provides the technology and handles that information only to run the store for the owner, and as described in this policy.

Store owners are responsible for having a lawful reason to collect shopper information, for telling their shoppers how it is used, and for responding to shoppers' requests. If you are a shopper and want to see, correct or delete your information, please contact the store you bought from first. We will help the store owner act on valid requests.

6. Who we share information with

We do not sell personal information. We share it only as needed to run the service:

• Cloud hosting and file-storage providers that keep the platform and its data running.
• Payment services: SSLCommerz, bKash, Nagad or other gateways, when you or a shopper pay through them. Each has its own privacy policy.
• SMS gateway providers, when messages are sent from a store.
• Courier or delivery services you connect, with the delivery details needed to carry out an order.
• The store owner, for information about that store's shoppers and orders.
• Authorities, courts or other parties when the law requires it, or to protect rights, safety and security.
• A buyer or successor, if MakeEstore is merged with or taken over by another business. We would tell you first and the same protections would continue to apply.

7. How we protect information

• Each store's data is kept separate from other stores' data.
• Passwords are stored only as salted hashes, and one-time login codes as hashes.
• Payment, SMS and courier credentials are encrypted when stored.
• Repeated failed sign-ins temporarily lock an account, and you can end your active sessions.
• Access to the dashboard is controlled by roles, so staff only see what they are allowed to.

No online service can be perfectly secure, so we cannot promise absolute security. Please use a strong, unique password and keep it private. If you find a security problem, please tell us using the contact details below.

8. Where information is stored

Information is stored with cloud providers whose servers may be located outside Bangladesh. When information is moved or stored abroad, we take reasonable steps to keep it protected.

9. How long we keep information

We keep information while your account is active and for as long as needed to provide the service, keep financial and security records, settle disputes and meet legal duties. When something is deleted in the dashboard it may first be marked as deleted and remain in backups for a limited time before it is permanently removed.

You can ask us to delete your account and information at any time (see section 10).

10. Your choices and rights

Subject to the law, you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct information that is wrong;
• delete your information or close your account;
• stop sending you marketing messages. Every marketing message gives a way to opt out, and service messages that are necessary to run your account may still be sent.

To make a request, contact us using the details below. We may need to confirm who you are first.

11. Changes to this policy

We may update this policy from time to time. We will change the "last updated" date at the top, and for important changes we will give a clearer notice, for example by email or inside the dashboard.