Privacy Policy
Effective: 23 May 2026
1. What we collect
Account data (name, phone, email, role), profile data (vendor portfolio, packages, location), transaction data (bookings, payments, payouts, reviews), and usage data (device, IP, referrer, in-app interactions). For Vendors we also collect verification documents (NID, trade license) — stored encrypted, accessible only by the verification team.
2. How we use it
To match Customers with Vendors, process bookings and payouts, prevent fraud, calculate ratings, send transactional notifications, comply with NBR/BFIU requirements, and improve the product. We never sell personal data.
3. Off-platform contact protection
Vendors never see a Customer's phone or email. Messages containing contact details, off-platform app names, or external URLs are masked before delivery. This protects both sides and is a core feature, not a limitation.
4. Payments
Payment processing is handled by SSLCommerz, bKash, and Nagad. Card and mobile-wallet details are entered on their secure pages — Ayojon does not store full payment credentials. We retain transaction IDs and amounts for reconciliation.
5. Sharing
We share data with: payment processors (to process transactions), notification providers (SMS/email for OTP and alerts), and law enforcement (only when legally compelled). Vendors and Customers see only the data necessary for the transaction (e.g., service date, city, scope) — not full profiles of each other.
6. Retention
Account data: as long as your account is active, plus 1 year. Transaction data: 6 years (BD tax and audit requirements). Verification documents: 3 years after account closure.
7. Your rights
You may access, correct, export, or delete your personal data. Some data must be retained to meet legal obligations even after account deletion. Send requests to privacy@ayojon.com.
8. Cookies
We use cookies for session management, preferences, and basic analytics. You can disable non-essential cookies in your browser without losing core functionality.
9. Children
Ayojon is not intended for users under 18. If we learn we have collected data on a minor we will delete it.
10. Updates
Material changes to this policy will be announced via email and in-app banner at least 14 days in advance.
11. Contact
For privacy concerns: privacy@ayojon.com. For data subject requests: dsr@ayojon.com.