Global Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies to: Bipofy websites and applications, Merchant ecommerce stores hosted on Bipofy, Custom domains connected to Bipofy, Bipofy subdomains, APIs and developer services, Customer support services, Platform integrations and automation systems, Analytics and marketing services provided by Bipofy. This policy applies globally to all users accessing Bipofy services internationally.

2. Information We Collect

2.1 Merchant Account Information

When merchants create or manage a Bipofy account, we may collect: Full name, Business name, Store name, Email address, Phone number, Billing address, Business address, Country and region, Payment and subscription details, Tax and invoicing information, Identity verification information where required, Domain and DNS configuration details, Business preferences and settings.

2.2 Customer Information Collected Through Merchant Stores

Merchants using Bipofy may collect customer data through their ecommerce stores, including: Customer names, Email addresses, Mobile numbers, Shipping addresses, Billing addresses, Order history, Shopping activity, Cart and checkout information, Customer communication history, Payment transaction details, Device and browser information. Bipofy processes such data on behalf of merchants as part of providing ecommerce infrastructure services.

2.3 Automatically Collected Information

When users access Bipofy services, we may automatically collect technical and usage information including: IP addresses, Browser type and version, Device identifiers, Operating system, Time zone and language settings, Access timestamps, Traffic logs, Referring pages, Interaction behavior, Store performance metrics, Session data, Security logs, Crash and diagnostic reports.

2.4 Cookies and Tracking Technologies

Bipofy uses cookies, web beacons, pixels, local storage, and similar tracking technologies to: Maintain user sessions, Improve store performance, Analyze traffic and behavior, Personalize user experiences, Enable ecommerce functionality, Support analytics and advertising, Improve security and fraud prevention. Users may control cookie preferences through browser settings.

3. How We Use Information

We use collected information to operate, maintain, and improve Bipofy services, including to: Create and manage ecommerce stores, Provide hosting and SaaS infrastructure, Process subscriptions and billing, Enable secure transactions, Configure custom domains and SSL, Deliver worldwide CDN services, Enable automatic SEO and analytics setup, Provide customer support, Improve performance and platform stability, Monitor fraud, abuse, and security threats, Send operational notifications, Deliver email and SMS services, Personalize user experiences, Develop new features and services, Comply with legal obligations.

4. Multi-Tenant Ecommerce Infrastructure

Bipofy operates a multi-tenant ecommerce platform where multiple independent merchant stores are hosted within shared infrastructure environments. Each merchant store operates independently and controls its own: Products, Customers, Orders, Store content, Marketing activities, Business policies. Bipofy acts primarily as a technology platform and infrastructure provider. Merchants are responsible for ensuring their own compliance with applicable privacy, ecommerce, consumer protection, and tax laws.

5. Third-Party Services and Integrations

Bipofy supports integrations with third-party providers and external services, including: Payment gateways (bKash, Nagad, SSLCommerz, ShurjoPay, Stripe, PayPal), Shipping providers, Marketing platforms, Analytics tools (Facebook Pixel, Google Analytics, TikTok Pixel, Google Tag Manager), Social media platforms, Domain providers, Customer support systems. These third-party services operate independently and may process data according to their own privacy policies and legal terms. Bipofy is not responsible for third-party practices, systems, or policies.

6. Payment Information

Bipofy does not directly store complete payment card information unless explicitly stated. Payments may be processed through secure third-party payment providers and gateways. Payment processors may independently collect and process billing and transaction information under their own compliance standards and privacy policies.

7. International Data Transfers

Bipofy operates globally and may process, store, and transfer information across multiple countries and regions through: Cloud infrastructure providers, Worldwide CDN networks, Backup systems, Security services, Third-party integrations. By using Bipofy services, users acknowledge and consent to international data transfers where permitted by applicable laws.

8. Data Security

Bipofy implements commercially reasonable and industry-standard security measures designed to protect information, including: SSL/TLS encryption, Secure authentication systems, Access control mechanisms, Firewall and server protection, Security monitoring systems, Threat detection technologies, Backup and disaster recovery systems, Infrastructure isolation and protection, Secure payment integrations. Despite our efforts, no internet-based system can guarantee absolute security.

9. Data Retention

We retain information for as long as necessary to: Provide services, Maintain platform operations, Fulfill contractual obligations, Resolve disputes, Prevent fraud and abuse, Enforce agreements, Comply with legal and regulatory requirements. Backup copies may remain temporarily after deletion requests.

10. User Rights and Data Control

Depending on local laws and regulations, users may have rights to: Access personal information, Correct inaccurate data, Request deletion, Restrict processing, Object to certain uses, Request data portability, Withdraw consent where applicable. Requests may be submitted directly to the relevant merchant or to Bipofy support where applicable.

11. Merchant Responsibilities

Merchants using Bipofy are solely responsible for: Maintaining their own privacy policies, Managing lawful customer data collection, Obtaining user consent where required, Handling customer data requests, Managing cookies and tracking disclosures, Complying with international ecommerce laws, Ensuring legal operation of their stores. Bipofy does not control merchant business operations or merchant-generated content.

12. Communications and Notifications

We may send operational and service-related communications including: Account verification emails, Billing notifications, Security alerts, Service announcements, Platform updates, Transactional SMS and emails, Technical notices. These communications are considered essential for platform operations.

13. Children's Privacy

Bipofy services are not intended for children under the age of 13 or the minimum legal age required in relevant jurisdictions. We do not knowingly collect personal information from children.

14. Prohibited Activities

Users may not use Bipofy services for unlawful, harmful, fraudulent, deceptive, or prohibited activities, including unauthorized data collection or privacy violations. Bipofy reserves the right to suspend or terminate accounts violating platform policies or applicable laws.

15. Changes to This Privacy Policy

We may update or revise this Global Privacy Policy periodically to reflect changes in: Laws and regulations, Platform features, Security practices, Operational requirements. Updated versions will be published on the Bipofy website with revised effective dates. Continued use of Bipofy services after updates constitutes acceptance of the revised policy.

16. Contact Information

For privacy-related inquiries, legal requests, or data protection concerns, please contact:

Bipofy Support Team
Website: https://bipofy.com
Email: [email protected]

17. Governing Law

This Privacy Policy shall be governed and interpreted according to applicable international laws, regulations, and legal requirements relevant to Bipofy operations and services.