BBSS Data Policy

1. Overview

Bipofy operates a multi-tenant ecommerce platform that includes a fraud prevention and delivery risk analysis system called BBSS, also known as Black Box Scoring System.

BBSS helps merchants assess the likelihood of successful delivery and cash-on-delivery acceptance based on historical order behavior patterns.

This system is designed to reduce fraud, failed deliveries, and operational losses.

2. Information We Collect

To provide BBSS services, Bipofy and its merchants may collect and process the following types of information:

• Customer contact information, such as phone number, email address, and shipping details.
• Order details, including order value, items purchased, and payment type such as cash-on-delivery or prepaid.
• Delivery outcomes, including delivered, returned, cancelled, and refused.
• Courier status updates, where applicable.
• Transaction timestamps and order frequency.

3. How We Use Information

We use collected data for the following purposes:

• Fraud prevention and risk detection.
• Cash-on-delivery risk assessment.
• Delivery reliability scoring, also known as BBSS Score.
• Improving logistics and order success rates.
• Platform security and abuse prevention.

BBSS generates an aggregated risk score and does not display raw cross-merchant order history to merchants.

4. BBSS Risk Scoring System

BBSS uses encrypted and anonymized behavioral signals to generate a delivery reliability score.

Example outputs may include:

• Delivery Reliability Score from 0 to 100.
• Risk Level, such as Low, Medium, or High.
• Recommendation, such as COD Accepted or Advance Payment Recommended.
• Confidence Level based on data volume.

BBSS does not publicly expose detailed customer activity across different merchants or stores.

5. Data Protection and Security

Bipofy uses strong security measures to protect data, including:

• Encryption of sensitive data in transit and at rest.
• Hashing of personal identifiers where applicable.
• Access control and authentication for authorized systems only.
• Isolation of tenant-level business data.
• Secure logging and monitoring systems.

We apply industry-standard safeguards to prevent unauthorized access, misuse, or disclosure of data.

6. Legal Basis for Processing

Depending on your location, we process data under one or more of the following legal bases:

• Legitimate interest, including fraud prevention and platform security.
• Contractual necessity, including order fulfillment and ecommerce services.
• Consent, where required by law.

For users in the European Economic Area, processing may fall under applicable provisions of the General Data Protection Regulation.

7. Data Sharing

We do not sell personal data.

Data may be shared only between authorized Bipofy system components for BBSS scoring, with merchants for risk scoring results in aggregated form only, with logistics providers for delivery fulfillment, and with legal authorities when required by law.

Merchants receive only risk scores and recommendations, not raw behavioral histories from other stores.

8. International Data Processing

Bipofy may process data in multiple countries to support global operations.

When data is transferred internationally, we apply appropriate safeguards to protect user information in accordance with applicable privacy laws.

9. Tenant Responsibility

Each merchant using Bipofy is responsible for informing their customers that order data may be processed for fraud prevention, ensuring lawful collection of customer data, using BBSS results only for legitimate business purposes, and not attempting to reverse-engineer or identify individuals from aggregated scores.

10. Data Retention

We retain data only as long as necessary to provide BBSS services, maintain fraud prevention effectiveness, comply with legal obligations, resolve disputes, and prevent abuse.

Data may be anonymized or aggregated for long-term statistical improvement.

11. User Rights

Depending on applicable law, including GDPR and US state privacy laws, users may have rights to access their personal data, request correction of inaccurate data, request deletion of data where applicable, object to certain types of processing, and request restriction of processing.

Requests may be submitted to the relevant merchant or Bipofy support.

12. Changes to This Policy

We may update this policy from time to time to reflect improvements to BBSS, legal requirements, or platform changes. Updates will be posted on the Bipofy platform.

13. Contact

For privacy-related questions or concerns, please contact Bipofy support via the official platform.

This policy applies to all Bipofy-powered stores using BBSS risk scoring services.