Privacy Policy

1. Who we are

Erada Tech ("Eradatech", "we", "us" or "our") provides Eradatech Commerce, software that lets businesses run point-of-sale, online stores and checkout pages from one back office. We are based at Floor 1A, House: 49/A, Road: 13/B, Sector: 5, Uttara, Dhaka, Bangladesh.

For any question about this policy or your personal information, email us at contact@eradatech.org.

2. What this policy covers

This policy explains how we handle personal information when you:

• visit our website at eradatech.org;
• request a demo, contact us, or sign up for an Eradatech Commerce account;
• receive emails from us; or
• use Eradatech Commerce as a business customer ("merchant") or as a member of a merchant's staff.

If you are a shopper buying from a store that runs on Eradatech Commerce, that store is responsible for your information. See section 13.

3. Information we collect

Information you give us

• Contact details: your name, business name, phone number and email address when you request a demo, contact us or create an account.
• Account details: login email, password (stored only in hashed form), staff names and roles.
• Billing details: plan, invoices and payment status. Card and mobile wallet payments are processed by our payment providers; we do not store full card numbers or wallet PINs.
• Messages: anything you send us by email, phone, chat or support ticket.
• Consent records: when and how you agreed to receive marketing emails, and when you unsubscribed.

Information collected automatically

• Device and usage data: IP address, browser and device type, operating system, language, pages viewed, and date and time of visits.
• Email engagement: whether an email we sent was delivered, opened or clicked, and whether it bounced or was marked as spam.

Information merchants store in Eradatech Commerce

Merchants store products, orders, stock, accounts, and their own customers' names, phone numbers, addresses and order history in the platform. We process this information on the merchant's behalf, as described in section 13.

4. How we use information

We do not sell your personal information, and we do not use it for purposes you would not reasonably expect from this policy.

5. Emails we send

Service emails

If you have an account or have asked for a demo, we send emails you need, such as demo confirmations, account confirmations, password resets, invoices and security alerts. These are part of providing the service.

Marketing emails

We send product news, tips and offers only to people who opted in, for example by ticking the newsletter box on our demo form. Every marketing email includes an unsubscribe link that works with one click. Unsubscribing does not stop the service emails you need to use your account. You can also unsubscribe by emailing contact@eradatech.org.

How we deliver emails

We use OneSignal, Inc. to send emails. OneSignal receives your email address, name, and the content of the emails we send you, and records delivery, opens, clicks, bounces and unsubscribes on our behalf. To measure opens and clicks, our emails may contain a small tracking image and links that pass through OneSignal. OneSignal's handling of this data is described in its privacy policy. You can stop open tracking by turning off automatic image loading in your email app.

We never buy, rent or borrow email lists. We only email addresses that people gave to us directly.

6. How we share information

We share personal information only with:

• Service providers that help us run our business, such as hosting and infrastructure providers, payment processors, and our email delivery provider, OneSignal. They may use the information only to provide services to us and must protect it.
• Couriers and payment providers a merchant connects, such as courier pickup or payment gateways, when the merchant uses those features.
• Professional advisers such as lawyers and accountants, under a duty of confidentiality.
• Authorities when the law requires it, or to protect the rights, property or safety of our users, the public or us.
• A buyer or successor if we are involved in a merger, acquisition or sale of assets, subject to this policy.

We do not sell, rent or trade personal information, and we do not share email addresses or marketing consent with anyone for their own marketing.

7. Cookies and similar technologies

Our public website does not use advertising or analytics cookies. The Eradatech Commerce dashboard uses session cookies to keep you signed in.

Our website loads fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads. Our emails may include a tracking image, as described in section 5. You can block or delete cookies in your browser settings, although parts of the dashboard may stop working.

8. How long we keep information

• Demo requests and enquiries: up to 24 months after our last contact, unless you become a customer.
• Account and merchant data: while the account is active, then deleted or anonymised within 90 days of closure, unless the merchant asks for an export first.
• Billing and tax records: as long as Bangladeshi tax and accounting law requires.
• Consent and unsubscribe records: as long as we email you, and afterwards as long as needed to prove consent and make sure we do not email you again after you unsubscribe.

9. Security

We protect information with encryption in transit (HTTPS), hashed passwords, role-based access for staff accounts, and access limited to people who need it. No system is completely secure. If a breach affects your personal information, we will tell you and the relevant authorities as the law requires.

10. Your choices and rights

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete your information, unless we must keep it by law;
• stop sending you marketing emails; and
• withdraw any consent you gave, at any time, without affecting what we did before.

Send requests to contact@eradatech.org. We will reply within 30 days and may ask you to confirm your identity first. If you are not satisfied with our answer, you may complain to the relevant data protection authority.

11. International transfers

We are based in Bangladesh. Some of our service providers, including OneSignal, store or process data in other countries, including the United States. When we transfer information, we use providers that commit to protecting it to the standard this policy describes.

12. Children

Eradatech Commerce is a business service. It is not directed at children under 18, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

13. Merchants and their customers

When a merchant uses Eradatech Commerce to store information about its own customers, the merchant decides what is collected and why, and is responsible for having a lawful basis and its own privacy notice. We process that information only on the merchant's instructions to provide the service.

If you bought from a store that uses Eradatech Commerce and want to access or delete your information, contact that store first. We will help the store respond.

14. Changes to this policy

We may update this policy as our service or the law changes. We will post the new version on this page with a new "last updated" date and, for significant changes, tell account holders by email or in the dashboard before the change takes effect.

15. Contact us