গোপনীয়তা নীতি

GraamBazaar is an online grocery ordering and home-delivery service operating in Bangladesh. We are the data controller responsible for your personal information. Our contact details are in Section 14.

We collect only the information needed to operate the Service.

2.1 Information you provide

• Account & profile: your name, phone number, and email address.
• Delivery details: delivery address, flat/house number, landmark, and recipient contact number.
• Orders: the products you add to your cart, place as orders, and your order history.
• Photos: images you choose to capture or upload (for example, to share with your delivery rider).
• Communications: messages you send to our support team, to your rider via in-app chat, and to our in-app AI assistant (see Section 4).
• Reviews & feedback: ratings and comments you submit about orders.

2.2 Information collected automatically

• Authentication data: we use Firebase Authentication, including phone-number sign-in with one-time passwords (OTP) and Google Sign-In.
• Location data: with your permission, your device location is used to find nearby branches, set your delivery address, and provide live order tracking.
• Device & diagnostic data: basic device information, app version, and diagnostic/usage data used to keep the Service reliable and secure.
• Push notification token: used to deliver order updates and offers via push notification.
• Locally stored data: some information (such as your cart and assistant chat history) is stored on your device to keep the app working smoothly.

2.3 Payments

Orders are paid via Cash on Delivery. We do not collect or store credit card, debit card, or bank account details through the app.

The app requests the following permissions, which you can grant or revoke at any time in your device settings:

The app includes an in-app assistant called BazaarBondhu that helps you find products and answer questions. When you chat with it:

• Your messages (and limited recent conversation context) are sent to our secure backend, which uses trusted third-party AI providers to generate a response.
• To personalise help, the assistant may store a small per-user "memory" (such as your preferences) linked to your account.

Please do not share sensitive personal information in assistant chats. You can ask us to delete your assistant memory at any time (see Section 9).

• Create and secure your account and authenticate you.
• Process, deliver, and track your orders.
• Show branches, product availability, and pricing relevant to your area.
• Send order updates, delivery notifications, and—if you opt in—promotional offers.
• Provide customer support and operate in-app and rider chat.
• Improve, personalise, and secure the Service, and detect or prevent fraud and abuse.
• Comply with legal obligations.

We do not sell your personal information. We share it only as needed to run the Service:

• Delivery riders receive your name, delivery address, and contact number to complete your delivery.
• Service providers that power the app, including Google Firebase (authentication, database, file storage, push notifications, analytics), Google Maps Platform (maps, location, live tracking), and AI providers (assistant responses, via our backend).
• Legal & safety: when required by law or to protect the rights, property, or safety of GraamBazaar, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

These providers process data under their own terms. For example, see Google's Privacy Policy at policies.google.com/privacy.

We keep your personal information for as long as your account is active or as needed to provide the Service, then retain and use it only as necessary to comply with legal obligations, resolve disputes, maintain order and delivery records, and enforce our agreements. When no longer needed, we delete or anonymise it.

We use industry-standard safeguards—including secure authentication, access controls, and encrypted connections (HTTPS/TLS)—to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.

• Access & update: view and edit your profile and addresses in the app.
• Permissions: turn location, camera, and notifications on or off in your device settings.
• Marketing: opt out of promotional notifications in the app's notification settings.
• Access, correction, or deletion of your personal data—contact us using Section 14.

You can request deletion of your GraamBazaar account and associated personal data at any time:

The Service is intended for users aged 18 and older and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Our service providers (such as Google) may process and store data on servers located outside Bangladesh. Where this happens, we take steps to ensure your information remains protected in line with this Policy.

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date. Material changes may also be notified in the app. Continued use of the Service after changes take effect means you accept the revised Policy.