This Privacy Policy explains what information Biponix collects, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to our website, the Biponix dashboard, and the online stores we host for merchants.
Introduction
Biponix is operated by Biponix Limited, a company registered in Bangladesh (incorporation no. C-212900/2026, trade licence TRAD/DNCC/010912/2026), with its registered office at House 87, T.I.C Colony Road, Faidabad, Daksinkhan, Dhaka 1230. In this policy, "Biponix", "we", "us" and "our" refer to Biponix Limited.
Biponix helps businesses in Bangladesh run an online store, manage orders, check delivery risk and book couriers. This policy covers four groups of people:
- Visitors — people who browse biponix.com.
- Waitlist signups — people who share their details through our "Start free" form.
- Merchants — businesses, and the people working for them, who hold a Biponix account.
- Buyers — people who visit or order from a store that a merchant runs on Biponix.
Information We Collect
We collect only what we need to run the service. Depending on how you use Biponix, this includes:
- Signup details — your email address, phone number, and, if you choose to share it, your Facebook page URL, together with the campaign (UTM) parameters in the link you arrived from.
- Merchant account details — your name, email, phone number, business name and address, login credentials, the team members you invite, and your plan and billing history.
- Store content — products, prices, images, stock levels, pages, themes, domain settings and other content you add to your store.
- Buyer order details — the name, phone number, delivery address, order contents, payment method, payment status and delivery status of orders placed on a merchant store.
- Payment information — payments on merchant stores are made through the merchant's own payment accounts (such as bKash, Nagad or SSLCommerz). We receive the payment status and transaction reference, never full card numbers, wallet PINs or passwords.
- Integration credentials — the courier API keys, Meta Pixel ID and Conversions API access token that merchants enter to connect their accounts.
- Device and usage information — IP address, browser and device type, pages viewed, referring pages, and timestamps, collected through server logs, cookies and analytics tools.
- Communications — messages, calls and support requests you send us, and our notes from onboarding and support conversations.
How We Use Information
We use information to:
- Create and run merchant accounts, host stores, and provide dashboard features.
- Process orders, share payment status, book parcels with couriers, and track deliveries on merchants' behalf.
- Check delivery risk on orders, as described in "Fraud & Delivery-Risk Checks" below.
- Send store purchase events to Meta and other advertising tools that a merchant has connected.
- Contact waitlist signups and merchants about onboarding, their account, billing and support.
- Send product news and offers, as described in "Marketing Communications" below.
- Monitor, secure and improve the platform, including debugging, preventing abuse, and measuring how features are used.
- Meet our legal, tax and accounting obligations, and respond to lawful requests from authorities.
Merchant Stores & Buyer Data
When you order from a store built on Biponix, the merchant who runs that store decides what information is collected and how it is used. The merchant is responsible for that information, and Biponix processes it on the merchant's instructions to provide our service. Each merchant is responsible for having its own privacy policy and for using buyer information lawfully.
If you are a buyer and want to access, correct or delete your order information, please contact the store you ordered from. If you contact us instead, we will pass your request to the merchant and help them respond. The one exception is the fraud and delivery-risk information described in the next section, which Biponix handles on its own behalf.
Fraud & Delivery-Risk Checks
Fake and repeatedly refused cash on delivery orders cost merchants in Bangladesh a great deal in wasted delivery charges and lost stock. To reduce this, Biponix shows merchants a delivery-risk check on each order. For this purpose, Biponix acts on its own behalf rather than for a single merchant.
The check works as follows:
- Information used — the buyer's phone number, and whether earlier parcels to that number were delivered or returned, and by which courier.
- Sources — delivery history from courier partners such as Steadfast, Pathao and RedX, and order outcomes from stores on Biponix.
- What merchants see — delivered and returned counts, a success rate and a risk label. Merchants never see which other stores a buyer ordered from, or the details of those orders.
- How it is used — as information to help a merchant decide, for example by calling to confirm an order. The check does not cancel orders automatically.
- Retention — delivery-risk records are kept for 24 months from the date of each order and then deleted.
- Your choices — if you believe your delivery history is wrong, or you object to this processing, contact us as described in "Contact Us". We will review your request and correct or remove records where appropriate.
Marketing Communications
If you join the waitlist or hold a merchant account, we may contact you about Biponix in the following ways. You can opt out of any of them at any time without affecting your account.
- Email — product news, launch announcements and offers. Every marketing email has an unsubscribe link.
- Phone and WhatsApp — onboarding and sales calls or messages. If you shared your Facebook page URL, we may look at your public page to understand your business before we get in touch. Tell us during a call or message that you do not want to be contacted again.
- SMS — occasional promotional messages. Reply with the opt-out instruction in the message, or contact us.
- Advertising audiences — we may upload your email address or phone number to Meta and Google in hashed (scrambled) form, so we can show you relevant Biponix ads or exclude you from them. These platforms match the hashed values against their own users and do not use them to identify you to us. Contact us to be removed from these audiences.
Third-Party Services & Integrations
Biponix connects with outside services to deliver its features. When a merchant turns on an integration, we share the information that service needs to do its job, and the provider handles it under its own terms and privacy policy.
- Couriers — Steadfast, Pathao and RedX receive the buyer name, phone number, delivery address, cash-to-collect amount and parcel details needed to book and deliver a parcel.
- Payment providers — bKash, Nagad and SSLCommerz process payments on merchant stores through the merchant's own accounts. Merchant subscription payments to Biponix are processed by our payment partners.
- Meta — receives store purchase events through the Pixel and Conversions API when a merchant connects them, and hashed contact details for our own advertising audiences.
- Google — provides website analytics and advertising services.
- Infrastructure providers — cloud hosting, data storage, email delivery, SMS delivery and customer support tools that process information only on our instructions.
Data Retention
We keep information only as long as we need it. Our standard retention periods are:
- Merchant account and store data — for as long as the account is open. When an account is closed, store data (including buyer order details) is deleted 90 days later. Merchants can export their data before then.
- Billing and tax records — 6 years, to meet accounting and tax requirements.
- Delivery-risk records — 24 months from the date of each order.
- Waitlist signups — until you create a merchant account, or 24 months after you sign up, whichever comes first.
- Server and security logs — 90 days, unless we need them longer to investigate a security incident.
- Information needed to resolve a dispute, enforce our agreements or meet a legal obligation may be kept longer, but only for as long as that purpose lasts.
Data Security
We protect information with technical and organisational safeguards. These include encrypted connections (HTTPS) for all traffic, encrypted storage of integration credentials such as courier API keys and Conversions API tokens, role-based access within merchant teams, and access to production systems limited to Biponix staff who need it.
If we become aware of a security breach that affects your personal information, we will notify affected merchants and, where required by law, the relevant authorities without undue delay. No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security.
Your Rights & Choices
Subject to the applicable laws of Bangladesh, you can ask us to:
- Access — tell you what personal information we hold about you and give you a copy.
- Export — provide your store data (products, orders and customers) in a commonly used, machine-readable format. Merchants can also request an export before closing their account.
- Correct — fix information that is inaccurate or incomplete. Merchants can update most account and store details directly in the dashboard.
- Delete — erase your information, as described in "Data Deletion".
- Object or restrict — stop or limit certain processing, including delivery-risk checks and advertising audiences.
- Withdraw consent — stop marketing messages at any time, as described in "Marketing Communications".
Data Deletion
To delete your information, email contact@biponix.com with the subject "Data Deletion Request". Include the email address or phone number linked to your account or signup, and, for a merchant account, the store name or domain.
We may ask you to confirm your identity before acting on the request, for example by replying from the email address on the account or confirming a code sent to your phone. We will complete the request, or explain why we cannot, within 30 days.
Deleting a merchant account removes the store, its content and its buyer order details. We keep only what we must by law, such as billing and tax records for their required period, and we remove it once that period ends. If you are a buyer, see "Merchant Stores & Buyer Data" for how to request deletion of your order information.
Children's Privacy
Biponix is a service for businesses. You must be at least 18 years old to create a merchant account, and our website and dashboard are not directed at children. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
International Data Transfers
We are based in Bangladesh, but some of our service providers, such as cloud hosting, email and analytics providers, store or process information in other countries. When information is transferred outside Bangladesh, we use providers that apply appropriate safeguards to protect it, and we handle the transfer in line with the applicable laws of Bangladesh.
Changes to This Policy
We may update this policy as our service or the law changes. The "Last updated" date at the top shows when it last changed. If we make a significant change, we will tell merchants by email or through a notice in the dashboard before it takes effect.
Contact Us
For questions about this policy or to make a privacy request, email contact@biponix.com with the subject "Privacy Request", call +880 9643 333399 (10am–8pm), or write to Biponix Limited, House 87, T.I.C Colony Road, Faidabad, Daksinkhan, Dhaka 1230, Bangladesh.