Privacy Policy
This policy explains what information we collect, why we collect it, how long we keep it and with whom we share it. It applies to three kinds of persons — shop users, dealers and customers who purchase phones on installments.
The most important point first: the control software installed on phones sold on installments does not collect the buyer's photos, videos, files, text message content, passwords or financial information. However, if an installment is in default, the names and numbers stored on the phone (contacts) and the recent call list are collected for the purpose of contacting the buyer. A complete list of what is and is not collected is in Section 5 below.
1. Who We Are
[কোম্পানির পূর্ণ আইনি নাম] (PhoneSell Pro), [নিবন্ধিত ঠিকানা]. Contact: support@phonesellpro.com.
2. Roles — Who Is Responsible
| Information | Controller | Our Role |
|---|---|---|
| Shop account and billing | Us | Controller |
| Customer information, installment agreements, devices | The relevant shop | Processor |
| Dealer account and credit transactions | Us | Controller |
In other words, the shop determines the purposes for which customer information will be used; we store and process it on the shop's instructions.
3. Information We Hold About Shops and Dealers
- Name, mobile number, email, address, business name.
- Login information (passwords are stored only in hashed form — we cannot see the original password).
- Records of bills, payments and credit transactions.
- Usage logs — who changed what and when (audit log), and the IP address and browser information used for access.
4. Customer Information Collected by the Shop
- Name, mobile number, address, national identity card number and image, and the customer's photograph.
- Occupation and monthly income (if the shop requires it).
- The name, mobile number, relationship, NID and address of up to two guarantors.
- The installment agreement, payment history and account of outstanding dues.
NID images and customer photographs are kept in protected (private) storage and can be viewed only by authorised staff after logging in to the panel. These images cannot be viewed through any public or direct link.
5. Information Sent by the Control Software Installed on the Phone
Only the information necessary for installment management and device protection:
| Information | Why |
|---|---|
| IMEI, model, operating system | To identify the phone and match it to the agreement |
| SIM and network status | To detect a SIM change/removal |
| Battery and connection status, regular heartbeat | Whether the phone is active and the software is running |
| Geographic location | To assist in recovering overdue/lost phones. Only the records of the last 36 hours are kept — all older data is deleted automatically |
| List of installed apps | App-lock feature and security checks |
| Recent call list (the last 24 calls — number, time and duration) | To attempt to contact the buyer if an installment is in default, and to verify whether the phone is being used. No recording or content of conversations is collected. |
| Names and numbers stored on the phone (contacts) | An alternative means of contacting the buyer if an installment is in default. Only names and numbers — no email, photo or notes. |
| Security events (root, factory reset, time change) | To detect attempts to disable the software |
What Is Not Collected
- Recordings of conversations or the content of calls.
- The content of text messages. (To deliver commands while offline, the software only checks whether an incoming message contains the designated control code — no message is stored or forwarded.)
- Photos, videos, files, browsing history, passwords or financial information.
- Any capture through the microphone or camera.
6. Why We Collect It (Purposes)
- Providing installment management services to shops — necessary for the performance of a contract.
- Operating the device lock and location services on the basis of the customer's consent.
- Keeping bills, payments and accounts — legal obligation.
- Fraud prevention and system security — legitimate interest.
7. Text Messages (SMS)
- Transactional messages are sent concerning installment dates, dues, payment confirmations and the agreement.
- If the customer does not wish to receive messages and informs the shop, the shop may turn them off from the panel. However, legal notices and essential messages concerning dues cannot be turned off.
- Promotional messages are sent only with consent.
- Records of messages sent are kept for up to 365 days and are then deleted automatically.
8. With Whom It Is Shared
- The relevant shop — can see its own customers' information. One shop cannot see another shop's information.
- Dealers — can see only information relating to their own shops' accounts and credits; they cannot see customers' personal information.
- Payment gateways (such as bKash) — only the information necessary to complete the payment.
- SMS providers — the recipient's number and the message.
- Hosting providers — for storing information on servers.
- Law enforcement agencies or courts — on the basis of a lawful order.
We do not sell anyone's personal information and do not transfer it to advertisers.
9. How Long It Is Kept
| Information | Retention Period |
|---|---|
| Phone location records | The last 36 hours — older records are deleted automatically every hour |
| Heartbeats, status and security events | 180 days |
| Text message records (including message text) | 365 days |
| Server technical request logs | 3 days |
| Device-related information after the agreement ends and the device is released | 90 days |
| Records of bills, payments and accounts | As required by applicable tax and accounting laws |
| Audit log (who changed what) | 6 years |
It must be stated clearly: even if an account is deleted, the audit log is not deleted. This is intentional — evidence of who did what must be kept for use in disputes or investigations. The audit log contains only descriptions of actions, not phonebooks or images of documents.
10. Security
- Passwords are stored in hashed form and gateway secret keys are stored encrypted.
- NIDs and customer photographs are kept in protected storage, behind permission-based access.
- Each shop's information is kept within a separate boundary (tenant scope) — one shop cannot reach another's information.
- Audit logs are kept of sensitive actions.
- If a security incident occurs, the affected shop will be notified.
11. Your Rights
- Right to know — you may ask what information is held about you.
- Right to rectification — you may have incorrect information corrected.
- Request for erasure — you may request erasure once the agreement and legal obligations have ended.
- Objection — you may object to promotional messages.
A customer shall first make a request to the relevant shop (the shop is the controller of the information). If it is not resolved, the customer may write to support@phonesellpro.com; we will respond within 7 working days.
12. Website and Forms
If you fill in a distributor application or contact form on our website, your IP address, browser information and the page from which you came are stored together with the information you provide — solely to prevent fake applications.
13. Children
Our services are not intended for persons under 18 years of age. A person must be an adult to enter into an installment agreement.
14. Changes to This Policy
When this policy is updated, the version number and date will change, and shops will be notified of significant changes.